/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.gateway.common.audit.AssertionMessages
 *  com.l7tech.gateway.common.audit.AuditDetailMessage
 *  com.l7tech.message.Message
 *  com.l7tech.policy.assertion.Assertion
 *  com.l7tech.policy.assertion.AssertionStatus
 *  com.l7tech.policy.assertion.PolicyAssertionException
 *  com.l7tech.policy.assertion.xmlsec.RequireWssSaml
 *  com.l7tech.policy.assertion.xmlsec.SecurityHeaderAddressableSupport
 *  com.l7tech.security.token.SamlSecurityToken
 *  com.l7tech.security.token.XmlSecurityToken
 *  com.l7tech.security.xml.processor.ProcessorResult
 *  com.l7tech.util.Triple
 *  org.jetbrains.annotations.NotNull
 */
package com.l7tech.server.policy.assertion.xmlsec;

import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.gateway.common.audit.AuditDetailMessage;
import com.l7tech.message.Message;
import com.l7tech.policy.assertion.Assertion;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.xmlsec.RequireWssSaml;
import com.l7tech.policy.assertion.xmlsec.SecurityHeaderAddressableSupport;
import com.l7tech.security.token.SamlSecurityToken;
import com.l7tech.security.token.XmlSecurityToken;
import com.l7tech.security.xml.processor.ProcessorResult;
import com.l7tech.server.message.AuthenticationContext;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.server.policy.assertion.xmlsec.ServerRequireSaml;
import com.l7tech.server.util.WSSecurityProcessorUtils;
import com.l7tech.util.Triple;
import java.io.IOException;
import org.jetbrains.annotations.NotNull;
import org.xml.sax.SAXException;

public class ServerRequireWssSaml<AT extends RequireWssSaml>
extends ServerRequireSaml<AT> {
    private static final String e = ServerRequireWssSaml.d(67, ServerRequireWssSaml.c("\u0002Jju\u001d\u0012\u0007\u0016\\j(\u0002\u0012F\u0010Wx9\u0001\u0005,\u0010_|)\u001f\u0005\f'\\h.\b\u0013\u001c%Kv8\b\u0013\u001b\u001cW~"));

    public ServerRequireWssSaml(AT AT) {
        super(AT);
    }

    @Override
    public AssertionStatus checkRequest(PolicyEnforcementContext policyEnforcementContext) throws IOException, PolicyAssertionException {
        try {
            if (!SecurityHeaderAddressableSupport.isLocalRecipient((Assertion)this.assertion)) {
                this.logAndAudit((AuditDetailMessage)AssertionMessages.REQUESTWSS_NOT_FOR_US);
                return AssertionStatus.NONE;
            }
        }
        catch (IOException iOException) {
            throw ServerRequireWssSaml.a(iOException);
        }
        return super.checkRequest(policyEnforcementContext);
    }

    @Override
    @NotNull
    protected Triple<AssertionStatus, ProcessorResult, SamlSecurityToken> getSamlSecurityTokenAndContext(Message message, String string, AuthenticationContext authenticationContext) throws IOException {
        XmlSecurityToken[] xmlSecurityTokenArray;
        ProcessorResult processorResult;
        block19: {
            block20: {
                block17: {
                    block18: {
                        block21: {
                            block16: {
                                try {
                                    if (!message.isSoap()) {
                                        this.logAndAudit((AuditDetailMessage)AssertionMessages.SAML_AUTHN_STMT_REQUEST_NOT_SOAP, string);
                                        return new Triple((Object)AssertionStatus.NOT_APPLICABLE, null, null);
                                    }
                                }
                                catch (IOException iOException) {
                                    throw ServerRequireWssSaml.a(iOException);
                                }
                                catch (SAXException sAXException) {
                                    throw new IOException(sAXException);
                                }
                                try {
                                    if (!this.isRequest() || this.config.getBooleanProperty(e, true)) break block16;
                                }
                                catch (SAXException sAXException) {
                                    throw ServerRequireWssSaml.a(sAXException);
                                }
                                processorResult = message.getSecurityKnob().getProcessorResult();
                                break block21;
                            }
                            processorResult = WSSecurityProcessorUtils.getWssResults(message, string, this.securityTokenResolver, this.getAudit());
                        }
                        try {
                            try {
                                if (processorResult != null) break block17;
                                this.logAndAudit((AuditDetailMessage)AssertionMessages.SAML_AUTHN_STMT_NO_TOKENS_PROCESSED, string);
                                if (!this.isRequest()) break block18;
                            }
                            catch (SAXException sAXException) {
                                throw ServerRequireWssSaml.a(sAXException);
                            }
                            authenticationContext.setAuthenticationMissing();
                        }
                        catch (SAXException sAXException) {
                            throw ServerRequireWssSaml.a(sAXException);
                        }
                    }
                    return new Triple((Object)AssertionStatus.AUTH_REQUIRED, null, null);
                }
                xmlSecurityTokenArray = processorResult.getXmlSecurityTokens();
                try {
                    try {
                        if (xmlSecurityTokenArray != null) break block19;
                        this.logAndAudit((AuditDetailMessage)AssertionMessages.SAML_AUTHN_STMT_NO_TOKENS_PROCESSED, string);
                        if (!this.isRequest()) break block20;
                    }
                    catch (SAXException sAXException) {
                        throw ServerRequireWssSaml.a(sAXException);
                    }
                    authenticationContext.setAuthenticationMissing();
                }
                catch (SAXException sAXException) {
                    throw ServerRequireWssSaml.a(sAXException);
                }
            }
            return new Triple((Object)AssertionStatus.AUTH_REQUIRED, null, null);
        }
        SamlSecurityToken samlSecurityToken = null;
        for (XmlSecurityToken xmlSecurityToken : xmlSecurityTokenArray) {
            if (!(xmlSecurityToken instanceof SamlSecurityToken)) continue;
            SamlSecurityToken samlSecurityToken2 = (SamlSecurityToken)xmlSecurityToken;
            if (samlSecurityToken != null) {
                this.logAndAudit((AuditDetailMessage)AssertionMessages.SAML_AUTHN_STMT_MULTIPLE_SAML_ASSERTIONS_UNSUPPORTED, string);
                AssertionStatus assertionStatus = this.getBadMessageStatus();
                return new Triple((Object)assertionStatus, null, null);
            }
            samlSecurityToken = samlSecurityToken2;
        }
        return new Triple((Object)AssertionStatus.NONE, (Object)processorResult, samlSecurityToken);
    }

    private static Exception a(Exception exception) {
        return exception;
    }

    private static char[] c(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x2B);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String d(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 54;
                    case 1 -> 122;
                    case 2 -> 90;
                    case 3 -> 24;
                    case 4 -> 46;
                    case 5 -> 35;
                    default -> 43;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}