/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.gateway.common.audit.AssertionMessages
 *  com.l7tech.gateway.common.audit.AuditDetailMessage
 *  com.l7tech.kerberos.KerberosGSSAPReqTicket
 *  com.l7tech.kerberos.KerberosServiceTicket
 *  com.l7tech.kerberos.KerberosUtils
 *  com.l7tech.message.HttpRequestKnob
 *  com.l7tech.policy.assertion.Assertion
 *  com.l7tech.policy.assertion.AssertionStatus
 *  com.l7tech.policy.assertion.PolicyAssertionException
 *  com.l7tech.policy.assertion.credential.LoginCredentials
 *  com.l7tech.policy.assertion.xmlsec.RequestWssKerberos
 *  com.l7tech.policy.assertion.xmlsec.SecurityHeaderAddressableSupport
 *  com.l7tech.security.token.KerberosSigningSecurityToken
 *  com.l7tech.security.token.SecurityToken
 *  com.l7tech.security.token.XmlSecurityToken
 *  com.l7tech.security.xml.SecurityTokenResolver
 *  com.l7tech.security.xml.processor.ProcessorResult
 *  com.l7tech.security.xml.processor.SecurityContextFinder
 *  com.l7tech.security.xml.processor.WssProcessorImpl
 *  com.l7tech.util.CausedIOException
 *  com.l7tech.util.Config
 *  org.springframework.context.ApplicationContext
 */
package com.l7tech.server.policy.assertion.xmlsec;

import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.gateway.common.audit.AuditDetailMessage;
import com.l7tech.kerberos.KerberosGSSAPReqTicket;
import com.l7tech.kerberos.KerberosServiceTicket;
import com.l7tech.kerberos.KerberosUtils;
import com.l7tech.message.HttpRequestKnob;
import com.l7tech.policy.assertion.Assertion;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.policy.assertion.xmlsec.RequestWssKerberos;
import com.l7tech.policy.assertion.xmlsec.SecurityHeaderAddressableSupport;
import com.l7tech.security.token.KerberosSigningSecurityToken;
import com.l7tech.security.token.SecurityToken;
import com.l7tech.security.token.XmlSecurityToken;
import com.l7tech.security.xml.SecurityTokenResolver;
import com.l7tech.security.xml.processor.ProcessorResult;
import com.l7tech.security.xml.processor.SecurityContextFinder;
import com.l7tech.security.xml.processor.WssProcessorImpl;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.server.policy.assertion.AbstractServerAssertion;
import com.l7tech.server.policy.assertion.xmlsec.b;
import com.l7tech.server.security.kerberos.KerberosSessionContextManager;
import com.l7tech.server.util.WSSecurityProcessorUtils;
import com.l7tech.util.CausedIOException;
import com.l7tech.util.Config;
import java.io.IOException;
import java.net.URL;
import java.util.logging.Level;
import org.springframework.context.ApplicationContext;
import org.xml.sax.SAXException;

public class ServerRequestWssKerberos
extends AbstractServerAssertion<RequestWssKerberos> {
    private final Config d;
    private final SecurityTokenResolver e;
    private final SecurityContextFinder f;
    private final KerberosSessionContextManager g;
    private RequestWssKerberos h;
    static final /* synthetic */ boolean i;
    private static final String[] j;

    public ServerRequestWssKerberos(RequestWssKerberos requestWssKerberos, ApplicationContext applicationContext) {
        super(requestWssKerberos);
        this.h = requestWssKerberos;
        String[] stringArray = j;
        this.d = (Config)applicationContext.getBean(stringArray[7], Config.class);
        this.e = (SecurityTokenResolver)applicationContext.getBean(stringArray[4], SecurityTokenResolver.class);
        this.f = (SecurityContextFinder)applicationContext.getBean(stringArray[6], SecurityContextFinder.class);
        this.g = (KerberosSessionContextManager)applicationContext.getBean(stringArray[0], KerberosSessionContextManager.class);
    }

    /*
     * Loose catch block
     */
    @Override
    public AssertionStatus checkRequest(PolicyEnforcementContext policyEnforcementContext) throws IOException, PolicyAssertionException {
        block42: {
            XmlSecurityToken xmlSecurityToken222;
            KerberosServiceTicket kerberosServiceTicket;
            block39: {
                HttpRequestKnob httpRequestKnob;
                block38: {
                    ProcessorResult processorResult;
                    try {
                        if (!SecurityHeaderAddressableSupport.isLocalRecipient((Assertion)this.h)) {
                            this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUESTWSS_NOT_FOR_US);
                            return AssertionStatus.NONE;
                        }
                    }
                    catch (SAXException sAXException) {
                        throw ServerRequestWssKerberos.a(sAXException);
                    }
                    try {
                        if (!policyEnforcementContext.getRequest().isSoap()) {
                            this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUEST_WSS_KERBEROS_NON_SOAP);
                            return AssertionStatus.BAD_REQUEST;
                        }
                    }
                    catch (KerberosSessionContextManager.DuplicateSessionException duplicateSessionException) {
                        throw ServerRequestWssKerberos.a(duplicateSessionException);
                    }
                    try {
                        String[] stringArray = j;
                        if (!this.d.getBooleanProperty(stringArray[1], true)) {
                            processorResult = policyEnforcementContext.getRequest().getSecurityKnob().getProcessorResult();
                        } else {
                            stringArray = j;
                            processorResult = WSSecurityProcessorUtils.getWssResults(policyEnforcementContext.getRequest(), stringArray[9], this.e, this.f, this.getAudit(), null);
                        }
                    }
                    catch (SAXException sAXException) {
                        throw new CausedIOException((Throwable)sAXException);
                    }
                    try {
                        if (processorResult == null) {
                            this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUESTWSS_NO_SECURITY);
                            policyEnforcementContext.setRequestPolicyViolated();
                            policyEnforcementContext.setAuthenticationMissing();
                            return AssertionStatus.FALSIFIED;
                        }
                    }
                    catch (SAXException sAXException) {
                        throw ServerRequestWssKerberos.a(sAXException);
                    }
                    XmlSecurityToken[] xmlSecurityTokenArray = processorResult.getXmlSecurityTokens();
                    try {
                        if (xmlSecurityTokenArray == null) {
                            this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUEST_WSS_KERBEROS_NO_TOKEN);
                            policyEnforcementContext.setAuthenticationMissing();
                            return AssertionStatus.AUTH_REQUIRED;
                        }
                    }
                    catch (SAXException sAXException) {
                        throw ServerRequestWssKerberos.a(sAXException);
                    }
                    String string = this.h.getServicePrincipalName();
                    if (string == null) {
                        String string2;
                        URL uRL;
                        httpRequestKnob = (HttpRequestKnob)policyEnforcementContext.getRequest().getKnob(HttpRequestKnob.class);
                        try {
                            uRL = httpRequestKnob != null ? httpRequestKnob.getRequestURL() : null;
                        }
                        catch (SAXException sAXException) {
                            throw ServerRequestWssKerberos.a(sAXException);
                        }
                        kerberosServiceTicket = uRL;
                        try {
                            string2 = httpRequestKnob != null ? httpRequestKnob.getRemoteAddress() : null;
                        }
                        catch (SAXException sAXException) {
                            throw ServerRequestWssKerberos.a(sAXException);
                        }
                        String string3 = string2;
                        string = KerberosUtils.toGssName((String)KerberosUtils.extractSpnFromRequest((URL)kerberosServiceTicket, (String)string3));
                    }
                    httpRequestKnob = null;
                    for (XmlSecurityToken xmlSecurityToken222 : xmlSecurityTokenArray) {
                        KerberosSigningSecurityToken kerberosSigningSecurityToken;
                        block40: {
                            block37: {
                                if (!(xmlSecurityToken222 instanceof KerberosSigningSecurityToken)) continue;
                                kerberosSigningSecurityToken = (KerberosSigningSecurityToken)xmlSecurityToken222;
                                if (this.d.getBooleanProperty(WssProcessorImpl.KRB5_USE_SPN_FROM_TICKET_PROP, false)) break block40;
                                try {
                                    block41: {
                                        if (string.equals(kerberosSigningSecurityToken.getServiceTicket().getServicePrincipalName())) break block37;
                                        break block41;
                                        catch (SAXException sAXException) {
                                            throw ServerRequestWssKerberos.a(sAXException);
                                        }
                                    }
                                    this.logger.info(j[5] + string + j[2] + kerberosSigningSecurityToken.getServiceTicket().getServicePrincipalName() + j[3]);
                                    continue;
                                }
                                catch (SAXException sAXException) {
                                    throw ServerRequestWssKerberos.a(sAXException);
                                }
                            }
                            httpRequestKnob = kerberosSigningSecurityToken;
                            continue;
                        }
                        httpRequestKnob = kerberosSigningSecurityToken;
                    }
                    if (httpRequestKnob == null) break block42;
                    kerberosServiceTicket = httpRequestKnob.getServiceTicket();
                    if (i) break block38;
                    try {
                        block43: {
                            if (kerberosServiceTicket != null) break block38;
                            break block43;
                            catch (SAXException sAXException) {
                                throw ServerRequestWssKerberos.a(sAXException);
                            }
                        }
                        throw new AssertionError();
                    }
                    catch (SAXException sAXException) {
                        throw ServerRequestWssKerberos.a(sAXException);
                    }
                }
                LoginCredentials loginCredentials = LoginCredentials.makeLoginCredentials((SecurityToken)httpRequestKnob, ((RequestWssKerberos)this.assertion).getClass());
                policyEnforcementContext.getAuthenticationContext(policyEnforcementContext.getRequest()).addCredentials(loginCredentials);
                policyEnforcementContext.setVariable(RequestWssKerberos.KERBEROS_REALM, this.a(kerberosServiceTicket.getClientPrincipalName()));
                this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUEST_WSS_KERBEROS_GOT_TICKET, kerberosServiceTicket.getClientPrincipalName());
                String string = KerberosUtils.getSessionIdentifier((KerberosGSSAPReqTicket)kerberosServiceTicket.getGSSAPReqTicket());
                try {
                    if (this.g.getSession(string) != null) break block39;
                    this.g.createSession(string, kerberosServiceTicket.getExpiry(), loginCredentials, kerberosServiceTicket.getKey());
                    break block39;
                }
                catch (SAXException sAXException) {
                    throw ServerRequestWssKerberos.a(sAXException);
                }
                {
                    catch (KerberosSessionContextManager.DuplicateSessionException duplicateSessionException) {
                        this.logger.log(Level.SEVERE, j[8], duplicateSessionException);
                    }
                }
            }
            xmlSecurityToken222 = kerberosServiceTicket.getEncData();
            try {
                if (null != xmlSecurityToken222) {
                    policyEnforcementContext.setVariable(RequestWssKerberos.KERBEROS_DATA, xmlSecurityToken222);
                }
            }
            catch (SAXException sAXException) {
                throw ServerRequestWssKerberos.a(sAXException);
            }
            this.a(policyEnforcementContext, kerberosServiceTicket);
            return AssertionStatus.NONE;
        }
        this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUEST_WSS_KERBEROS_NO_TICKET);
        policyEnforcementContext.setAuthenticationMissing();
        return AssertionStatus.AUTH_REQUIRED;
    }

    private void a(PolicyEnforcementContext policyEnforcementContext, KerberosServiceTicket kerberosServiceTicket) {
        policyEnforcementContext.addDeferredAssertion(this, new b(this, (Assertion)this.h, kerberosServiceTicket));
    }

    private String a(String string) {
        String string2 = "";
        int n2 = string.lastIndexOf("@");
        if (n2 > -1) {
            string2 = string.substring(n2 + 1);
        }
        return string2;
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[10];
                var3_1 = 0;
                var2_2 = "EQFaoK\u0010]gQpyP\u0010@w[m~\\\u0007ZyUmk^\u001a\\-YGG-zK\u0010MQGpeKQKZUaf\\;KRQqx\\\u001b|QEvoJ\u000b~F[`oJ\fGZS\u0004\t\u0018\u0014$\u0003\t\u001d\u001a\u0015]QWvxP\u000bW`[hoW-KG[o|\\\r0gSZlxP\u0011I\u0014\u007ffx[\u001a\\[G#y\\\f]][m*_\u0010\\\u0014UmeM\u0017KF\u0014poK\tGWQ#\"\u001e\u0015]QWvxP\u000bWw[m~\\\u0007Zr]mn\\\r\f]QFuoK<AZRjm";
                var4_3 = "EQFaoK\u0010]gQpyP\u0010@w[m~\\\u0007ZyUmk^\u001a\\-YGG-zK\u0010MQGpeKQKZUaf\\;KRQqx\\\u001b|QEvoJ\u000b~F[`oJ\fGZS\u0004\t\u0018\u0014$\u0003\t\u001d\u001a\u0015]QWvxP\u000bW`[hoW-KG[o|\\\r0gSZlxP\u0011I\u0014\u007ffx[\u001a\\[G#y\\\f]][m*_\u0010\\\u0014UmeM\u0017KF\u0014poK\tGWQ#\"\u001e\u0015]QWvxP\u000bWw[m~\\\u0007Zr]mn\\\r\f]QFuoK<AZRjm".length();
                var1_4 = 29;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 44;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerRequestWssKerberos.b(v0, ServerRequestWssKerberos.b(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "t_Zq}D\u0000DO\nnqT\u0012YED=\u007fB\u0018\u0010OXo{UAGBOs4D\u0013UK^tz@A[OX\u007fqU\u000eC\nYxgT\b_D\u0004\u0007bO[hqT\u0015";
                    var4_3 = "t_Zq}D\u0000DO\nnqT\u0012YED=\u007fB\u0018\u0010OXo{UAGBOs4D\u0013UK^tz@A[OX\u007fqU\u000eC\nYxgT\b_D\u0004\u0007bO[hqT\u0015".length();
                    var1_4 = 59;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 50;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerRequestWssKerberos.b(v0, ServerRequestWssKerberos.b(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        ServerRequestWssKerberos.j = var5;
        ServerRequestWssKerberos.i = ServerRequestWssKerberos.class.desiredAssertionStatus() == false;
    }

    private static Exception a(Exception exception) {
        return exception;
    }

    private static char[] b(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x53);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String b(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 2;
                    case 1 -> 24;
                    case 2 -> 24;
                    case 3 -> 47;
                    case 4 -> 38;
                    case 5 -> 21;
                    default -> 83;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}