/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.gateway.common.audit.AssertionMessages
 *  com.l7tech.gateway.common.audit.AuditDetailMessage
 *  com.l7tech.gateway.common.audit.AuditFactory
 *  com.l7tech.message.Message
 *  com.l7tech.policy.assertion.Assertion
 *  com.l7tech.policy.assertion.AssertionStatus
 *  com.l7tech.policy.assertion.PolicyAssertionException
 *  com.l7tech.policy.assertion.credential.wss.WssDigest
 *  com.l7tech.policy.assertion.xmlsec.SecurityHeaderAddressableSupport
 *  com.l7tech.security.token.UsernameToken
 *  com.l7tech.security.token.UsernameTokenImpl
 *  com.l7tech.security.token.XmlSecurityToken
 *  com.l7tech.security.xml.SecurityTokenResolver
 *  com.l7tech.security.xml.processor.ProcessorResult
 *  com.l7tech.util.Config
 *  jakarta.inject.Inject
 *  org.jetbrains.annotations.NotNull
 *  org.jetbrains.annotations.Nullable
 */
package com.l7tech.server.policy.assertion.credential.wss;

import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.gateway.common.audit.AuditDetailMessage;
import com.l7tech.gateway.common.audit.AuditFactory;
import com.l7tech.message.Message;
import com.l7tech.policy.assertion.Assertion;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.credential.wss.WssDigest;
import com.l7tech.policy.assertion.xmlsec.SecurityHeaderAddressableSupport;
import com.l7tech.security.token.UsernameToken;
import com.l7tech.security.token.UsernameTokenImpl;
import com.l7tech.security.token.XmlSecurityToken;
import com.l7tech.security.xml.SecurityTokenResolver;
import com.l7tech.security.xml.processor.ProcessorResult;
import com.l7tech.server.message.AuthenticationContext;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.server.policy.assertion.AbstractMessageTargetableServerAssertion;
import com.l7tech.server.policy.assertion.AssertionStatusException;
import com.l7tech.server.policy.variable.ExpandVariables;
import com.l7tech.server.util.WSSecurityProcessorUtils;
import com.l7tech.util.Config;
import jakarta.inject.Inject;
import java.io.IOException;
import java.util.ArrayList;
import java.util.Collection;
import java.util.Map;
import org.jetbrains.annotations.NotNull;
import org.jetbrains.annotations.Nullable;
import org.xml.sax.SAXException;

public class ServerWssDigest
extends AbstractMessageTargetableServerAssertion<WssDigest> {
    @Inject
    Config config;
    @Inject
    SecurityTokenResolver securityTokenResolver;
    private final String[] d;
    private static final String[] e;

    public ServerWssDigest(@NotNull WssDigest wssDigest) {
        if (wssDigest == null) {
            ServerWssDigest.c(0);
        }
        this(wssDigest, (AuditFactory)null);
    }

    public ServerWssDigest(@NotNull WssDigest wssDigest, @Nullable AuditFactory auditFactory) {
        if (wssDigest == null) {
            ServerWssDigest.c(1);
        }
        super(wssDigest, auditFactory);
        this.d = wssDigest.getVariablesUsed();
    }

    @Override
    public AssertionStatus checkRequest(PolicyEnforcementContext policyEnforcementContext) throws IOException, PolicyAssertionException {
        try {
            if (!SecurityHeaderAddressableSupport.isLocalRecipient((Assertion)this.assertion)) {
                this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUESTWSS_NOT_FOR_US);
                return AssertionStatus.NONE;
            }
        }
        catch (IOException iOException) {
            throw ServerWssDigest.a(iOException);
        }
        return super.checkRequest(policyEnforcementContext);
    }

    /*
     * Loose catch block
     */
    @Override
    protected AssertionStatus doCheckRequest(PolicyEnforcementContext policyEnforcementContext, Message message, String string, AuthenticationContext authenticationContext) throws IOException, PolicyAssertionException {
        try {
            if (!message.isSoap()) {
                this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUEST_NOT_SOAP);
                return AssertionStatus.NOT_APPLICABLE;
            }
        }
        catch (IOException iOException) {
            throw ServerWssDigest.a(iOException);
        }
        try {
            ProcessorResult processorResult;
            block18: {
                block16: {
                    block17: {
                        block15: {
                            try {
                                if (!this.isRequest() || this.config.getBooleanProperty(e[5], true)) break block15;
                            }
                            catch (SAXException sAXException) {
                                throw ServerWssDigest.a(sAXException);
                            }
                            processorResult = message.getSecurityKnob().getProcessorResult();
                            break block17;
                        }
                        processorResult = WSSecurityProcessorUtils.getWssResults(message, string, this.securityTokenResolver, this.getAudit());
                    }
                    if (processorResult != null) break block18;
                    try {
                        block19: {
                            this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUESTWSS_NO_SECURITY);
                            if (!this.isRequest()) break block16;
                            break block19;
                            catch (SAXException sAXException) {
                                throw ServerWssDigest.a(sAXException);
                            }
                        }
                        policyEnforcementContext.setAuthenticationMissing();
                        policyEnforcementContext.setRequestPolicyViolated();
                    }
                    catch (SAXException sAXException) {
                        throw ServerWssDigest.a(sAXException);
                    }
                }
                return AssertionStatus.AUTH_REQUIRED;
            }
            Map<String, Object> map = policyEnforcementContext.getVariableMap(this.d, this.getAudit());
            Collection<UsernameToken> collection = this.a(processorResult);
            for (UsernameToken usernameToken : collection) {
                AssertionStatus assertionStatus = this.a(usernameToken, map);
                if (assertionStatus != AssertionStatus.NONE) continue;
                String[] stringArray = new String[1];
                String[] stringArray2 = e;
                stringArray[0] = stringArray2[7];
                this.logAndAudit((AuditDetailMessage)AssertionMessages.USERDETAIL_INFO, stringArray);
                return assertionStatus;
            }
            try {
                this.logAndAudit((AuditDetailMessage)AssertionMessages.EXCEPTION_WARNING_WITH_MORE_INFO, e[6]);
                if (this.isRequest()) {
                    policyEnforcementContext.setRequestPolicyViolated();
                }
            }
            catch (SAXException sAXException) {
                throw ServerWssDigest.a(sAXException);
            }
            return AssertionStatus.FALSIFIED;
        }
        catch (SAXException sAXException) {
            this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUEST_BAD_XML);
            return AssertionStatus.BAD_REQUEST;
        }
    }

    private AssertionStatus a(UsernameToken usernameToken, Map<String, ?> map) {
        String string;
        String string2;
        String string3;
        String string4;
        String string5;
        block22: {
            block21: {
                try {
                    if (!usernameToken.isDigest()) {
                        return this.a(e[8]);
                    }
                }
                catch (AssertionStatusException assertionStatusException) {
                    throw ServerWssDigest.a(assertionStatusException);
                }
                string5 = usernameToken.getUsername();
                string4 = usernameToken.getPasswordDigest();
                string3 = usernameToken.getNonce();
                string2 = usernameToken.getCreated();
                try {
                    try {
                        if (!((WssDigest)this.assertion).isRequireTimestamp() || string2 != null) break block21;
                    }
                    catch (AssertionStatusException assertionStatusException) {
                        throw ServerWssDigest.a(assertionStatusException);
                    }
                    return this.b(e[4]);
                }
                catch (AssertionStatusException assertionStatusException) {
                    throw ServerWssDigest.a(assertionStatusException);
                }
            }
            try {
                try {
                    if (!((WssDigest)this.assertion).isRequireNonce() || string3 != null) break block22;
                }
                catch (AssertionStatusException assertionStatusException) {
                    throw ServerWssDigest.a(assertionStatusException);
                }
                return this.b(e[11]);
            }
            catch (AssertionStatusException assertionStatusException) {
                throw ServerWssDigest.a(assertionStatusException);
            }
        }
        String string6 = ((WssDigest)this.assertion).getRequiredUsername();
        if (string6 != null) {
            string = ExpandVariables.process(string6, map, this.getAudit());
            try {
                if (!string.equals(string5)) {
                    return this.b(e[2]);
                }
            }
            catch (AssertionStatusException assertionStatusException) {
                throw ServerWssDigest.a(assertionStatusException);
            }
        }
        string = ((WssDigest)this.assertion).getRequiredPassword();
        try {
            if (string == null) {
                throw new AssertionStatusException(AssertionStatus.SERVER_ERROR, e[1]);
            }
        }
        catch (AssertionStatusException assertionStatusException) {
            throw ServerWssDigest.a(assertionStatusException);
        }
        String string7 = UsernameTokenImpl.createPasswordDigest((char[])ExpandVariables.process(string, map, this.getAudit()).toCharArray(), (String)string2, (String)string3);
        try {
            if (!string7.equals(string4)) {
                return this.b(e[3]);
            }
        }
        catch (AssertionStatusException assertionStatusException) {
            throw ServerWssDigest.a(assertionStatusException);
        }
        return AssertionStatus.NONE;
    }

    private AssertionStatus a(String string) {
        this.logAndAudit((AuditDetailMessage)AssertionMessages.USERDETAIL_FINE, string);
        return AssertionStatus.FALSIFIED;
    }

    private AssertionStatus b(String string) {
        this.logAndAudit((AuditDetailMessage)AssertionMessages.EXCEPTION_WARNING_WITH_MORE_INFO, string);
        return AssertionStatus.FALSIFIED;
    }

    private Collection<UsernameToken> a(ProcessorResult processorResult) {
        ArrayList<UsernameToken> arrayList = new ArrayList<UsernameToken>();
        for (XmlSecurityToken xmlSecurityToken : processorResult.getXmlSecurityTokens()) {
            if (!(xmlSecurityToken instanceof UsernameToken)) continue;
            UsernameToken usernameToken = (UsernameToken)xmlSecurityToken;
            arrayList.add(usernameToken);
        }
        return arrayList;
    }

    private static /* synthetic */ void c(int n2) {
        String[] stringArray = e;
        throw new IllegalArgumentException(String.format(stringArray[12], stringArray[9], stringArray[10], stringArray[0]));
    }

    private static Exception a(Exception exception) {
        return exception;
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[13];
                var3_1 = 0;
                var2_2 = "\"y2}PH.Ic/PM\u0011pmd|uW\u0005pld5{JV}\u007fc|zKVe\u007fc/cK\u0004q>s3zB\u001frkb9p@Ww2{V\u001f{y0\tgA\u0004{\u007f}9@K\u001dpp0(|E\u00025z\u007f9g\u0004\u0018zj0?{J\u0002tw~|u\u0004\u001btjs4}J\u00115kc9fJ\u0017x{<Kc9fJ\u0017x{D3\u007fA\u00185zy;qW\u00025hq0aAVqqu/4J\u0019a>}=`G\u001e5jx94A\u000ee{s(q@Vc\u007f|)q8Ww2{V\u001f{y0\tgA\u0004{\u007f}9@K\u001dpp0(|E\u00025z\u007f9g\u0004\u0018zj0?{J\u0002tw~|u\u0004\u0002|su/`E\u001be-ic/:T\u0004z}u/gK\u0004;{~=vH\u0013Q{v9fV\u0013qLu-aA\u0005aNb3wA\u0005fw~;3P\u007f|wK\u0018sqb1}J\u00115IC\u000f4`\u001fr{c(4P\u0019~{~|cE\u00055x\u007f)z@V|p0.qU\u0003pmd'IC\u000f4`\u001fr{c(4P\u0019~{~|bE\u001a|zq(q@Vfks?qW\u0005sk|0m>Ww2{V\u001f{y0\tgA\u0004{\u007f}9@K\u001dpp0(|E\u00025z\u007f9g\u0004\u0018zj0?{J\u0002tw~|u\u0004\u0012|yu/`\u0004\u0006tmc+{V\u0012\t\u007fc/qV\u0002|q~A}\u007f1;HAa{s4;W\u0013ghu.;T\u0019yws%;E\u0005f{b(}K\u0018:}b9pA\u0018awq0;S\u0005f1C9fR\u0013gIc/PM\u0011pmd";
                var4_3 = "\"y2}PH.Ic/PM\u0011pmd|uW\u0005pld5{JV}\u007fc|zKVe\u007fc/cK\u0004q>s3zB\u001frkb9p@Ww2{V\u001f{y0\tgA\u0004{\u007f}9@K\u001dpp0(|E\u00025z\u007f9g\u0004\u0018zj0?{J\u0002tw~|u\u0004\u001btjs4}J\u00115kc9fJ\u0017x{<Kc9fJ\u0017x{D3\u007fA\u00185zy;qW\u00025hq0aAVqqu/4J\u0019a>}=`G\u001e5jx94A\u000ee{s(q@Vc\u007f|)q8Ww2{V\u001f{y0\tgA\u0004{\u007f}9@K\u001dpp0(|E\u00025z\u007f9g\u0004\u0018zj0?{J\u0002tw~|u\u0004\u0002|su/`E\u001be-ic/:T\u0004z}u/gK\u0004;{~=vH\u0013Q{v9fV\u0013qLu-aA\u0005aNb3wA\u0005fw~;3P\u007f|wK\u0018sqb1}J\u00115IC\u000f4`\u001fr{c(4P\u0019~{~|cE\u00055x\u007f)z@V|p0.qU\u0003pmd'IC\u000f4`\u001fr{c(4P\u0019~{~|bE\u001a|zq(q@Vfks?qW\u0005sk|0m>Ww2{V\u001f{y0\tgA\u0004{\u007f}9@K\u001dpp0(|E\u00025z\u007f9g\u0004\u0018zj0?{J\u0002tw~|u\u0004\u0012|yu/`\u0004\u0006tmc+{V\u0012\t\u007fc/qV\u0002|q~A}\u007f1;HAa{s4;W\u0013ghu.;T\u0019yws%;E\u0005f{b(}K\u0018:}b9pA\u0018awq0;S\u0005f1C9fR\u0013gIc/PM\u0011pmd".length();
                var1_4 = 6;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 51;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerWssDigest.c(v0, ServerWssDigest.c(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "gG\u0002Kf/KI\u00009Wq4KOM\tp{-@@\u0000\u0018Lu2\u0005JO\tW4(JZ\u0000\u000fKz2DGNLE4(J@C\t>oR\u000bQy#KZ\u0000\nKffe`O\u0018ja*I\u000eP\rVu+@ZE\u001e\u00043cV\t\u0000\u0003B4cV\u0000\u0005\u001f\u0004y3VZ\u0000\u0002K`fGK\u0000\u0002Qx*";
                    var4_3 = "gG\u0002Kf/KI\u00009Wq4KOM\tp{-@@\u0000\u0018Lu2\u0005JO\tW4(JZ\u0000\u000fKz2DGNLE4(J@C\t>oR\u000bQy#KZ\u0000\nKffe`O\u0018ja*I\u000eP\rVu+@ZE\u001e\u00043cV\t\u0000\u0003B4cV\u0000\u0005\u001f\u0004y3VZ\u0000\u0002K`fGK\u0000\u0002Qx*".length();
                    var1_4 = 52;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 3;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerWssDigest.c(v0, ServerWssDigest.c(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        ServerWssDigest.e = var5;
    }

    private static char[] c(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x26);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String c(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 45;
                    case 1 -> 35;
                    case 2 -> 111;
                    case 3 -> 39;
                    case 4 -> 23;
                    case 5 -> 69;
                    default -> 38;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}