/* * Decompiled with CFR 0.152. * * Could not load the following classes: * com.l7tech.gateway.common.audit.AssertionMessages * com.l7tech.gateway.common.audit.AuditDetailMessage * com.l7tech.message.Message * com.l7tech.message.MessageRole * com.l7tech.policy.assertion.AssertionStatus * com.l7tech.policy.assertion.IdentityTarget * com.l7tech.policy.assertion.xmlsec.RequireWssSignedElement * com.l7tech.policy.variable.VariableMetadata * com.l7tech.policy.variable.VariableNotSettableException * com.l7tech.security.token.ParsedElement * com.l7tech.security.token.SamlSecurityToken * com.l7tech.security.token.SignedElement * com.l7tech.security.token.SigningSecurityToken * com.l7tech.security.token.X509SigningSecurityToken * com.l7tech.security.xml.processor.ProcessorResult * com.l7tech.util.ConfigFactory * com.l7tech.util.Pair * org.springframework.context.ApplicationContext */ package com.l7tech.server.policy.assertion.xmlsec; import com.l7tech.gateway.common.audit.AssertionMessages; import com.l7tech.gateway.common.audit.AuditDetailMessage; import com.l7tech.message.Message; import com.l7tech.message.MessageRole; import com.l7tech.policy.assertion.AssertionStatus; import com.l7tech.policy.assertion.IdentityTarget; import com.l7tech.policy.assertion.xmlsec.RequireWssSignedElement; import com.l7tech.policy.variable.VariableMetadata; import com.l7tech.policy.variable.VariableNotSettableException; import com.l7tech.security.token.ParsedElement; import com.l7tech.security.token.SamlSecurityToken; import com.l7tech.security.token.SignedElement; import com.l7tech.security.token.SigningSecurityToken; import com.l7tech.security.token.X509SigningSecurityToken; import com.l7tech.security.xml.processor.ProcessorResult; import com.l7tech.server.message.AuthenticationContext; import com.l7tech.server.message.PolicyEnforcementContext; import com.l7tech.server.policy.assertion.xmlsec.ServerRequireWssOperation; import com.l7tech.server.util.WSSecurityProcessorUtils; import com.l7tech.util.ConfigFactory; import com.l7tech.util.Pair; import java.util.Arrays; import java.util.Collection; import java.util.List; import java.util.logging.Level; import org.springframework.context.ApplicationContext; public class ServerRequireWssSignedElement extends ServerRequireWssOperation { private static final boolean h; private static final String[] j; public ServerRequireWssSignedElement(RequireWssSignedElement requireWssSignedElement, ApplicationContext applicationContext) { super(requireWssSignedElement, applicationContext); } @Override protected String getPastTenseOperationName() { return j[4]; } @Override protected AssertionStatus onCheckRequestSuccess(PolicyEnforcementContext policyEnforcementContext, Message message, String string) { block6: { ProcessorResult processorResult = message.getSecurityKnob().getProcessorResult(); try { try { try { if (processorResult == null) break block6; this.a(policyEnforcementContext, message, processorResult); if (!this.isRequest()) break block6; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } if (!policyEnforcementContext.isResponseWss11()) break block6; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } message.getSecurityKnob().setNeedsSignatureConfirmations(true); } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } } return AssertionStatus.NONE; } @Override protected ParsedElement[] getElementsFoundByProcessor(ProcessorResult processorResult) { try { if (processorResult == null) { return new ParsedElement[0]; } } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } return processorResult.getElementsThatWereSigned(); } @Override protected boolean elementsFoundByProcessorAreValid(PolicyEnforcementContext policyEnforcementContext, Message message, ProcessorResult processorResult, ParsedElement[] parsedElementArray) { boolean bl2; block12: { boolean bl3; block16: { block13: { AuthenticationContext authenticationContext; Message message2; boolean bl4; ParsedElement[] parsedElementArray2; ProcessorResult processorResult2; AuthenticationContext authenticationContext2; block15: { Message message3; block14: { bl2 = true; message3 = message.getRelated(MessageRole.REQUEST); try { if (parsedElementArray.length <= 0 || !new IdentityTarget().equals((Object)new IdentityTarget(((RequireWssSignedElement)this.assertion).getIdentityTarget()))) break block12; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } try { try { try { if (!this.isRequest() && !this.a(message, processorResult, null)) break block13; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } authenticationContext2 = policyEnforcementContext.getAuthenticationContext(message); processorResult2 = processorResult; parsedElementArray2 = new ParsedElement[]{}; bl4 = h; message2 = message3; if (message3 != null) break block14; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } authenticationContext = null; break block15; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } } authenticationContext = policyEnforcementContext.getAuthenticationContext(message3); } try { try { if (!WSSecurityProcessorUtils.isValidSingleSigner(authenticationContext2, processorResult2, parsedElementArray2, bl4, message2, authenticationContext, this.getAudit()) || !this.a(parsedElementArray)) break block13; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } bl3 = true; break block16; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } } bl3 = false; } bl2 = bl3; } return bl2; } @Override protected boolean elementsFoundForAssertionAreValid(PolicyEnforcementContext policyEnforcementContext, Message message, ProcessorResult processorResult, ParsedElement[] parsedElementArray) { boolean bl2 = true; if (!new IdentityTarget().equals((Object)new IdentityTarget(((RequireWssSignedElement)this.assertion).getIdentityTarget()))) { boolean bl3; block10: { block9: { List list = Arrays.asList(parsedElementArray); try { try { try { try { if (!this.isRequest() && !this.a(message, processorResult, list)) break block9; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } if (!WSSecurityProcessorUtils.isValidSigningIdentity(policyEnforcementContext.getAuthenticationContext(message), ((RequireWssSignedElement)this.assertion).getIdentityTarget(), processorResult, list.toArray(new ParsedElement[list.size()]))) break block9; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } if (!this.a(parsedElementArray)) break block9; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } bl3 = true; break block10; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } } bl3 = false; } return bl3; } return bl2; } private boolean a(ParsedElement[] parsedElementArray) { for (ParsedElement parsedElement : parsedElementArray) { if (!(parsedElement instanceof SignedElement)) continue; for (String string : ((SignedElement)parsedElement).getDigestAlgorithmIds()) { try { if (((RequireWssSignedElement)this.assertion).acceptsDigest(string)) continue; this.logger.log(Level.INFO, j[5] + string); return false; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } } } return true; } @Override protected boolean isAllowIfEmpty() { return false; } private boolean a(Message message, ProcessorResult processorResult, Collection collection) { Pair> pair; block4: { pair = WSSecurityProcessorUtils.processSignatureConfirmations(message.getSecurityKnob(), processorResult, this.getAudit()); try { try { if (collection == null || pair.getValue() == null) break block4; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } collection.addAll((Collection)pair.getValue()); } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } } return (Boolean)pair.getKey(); } private String a(String string) { return VariableMetadata.prefixName((String)((RequireWssSignedElement)this.assertion).getVariablePrefix(), (String)string); } private void a(PolicyEnforcementContext policyEnforcementContext, Message message, ProcessorResult processorResult) { block9: { try { if (((RequireWssSignedElement)this.assertion).getVariablePrefix() == null || ((RequireWssSignedElement)this.assertion).getVariablePrefix().length() <= 0) break block9; } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } SigningSecurityToken signingSecurityToken = WSSecurityProcessorUtils.getSigningSecurityTokenByIdentity(policyEnforcementContext.getAuthenticationContext(message), processorResult, ((RequireWssSignedElement)this.assertion).getIdentityTarget()); if (signingSecurityToken != null) { SignedElement[] signedElementArray = signingSecurityToken.getSignedElements(); try { if (signedElementArray.length > 0) { this.a(policyEnforcementContext, RequireWssSignedElement.VAR_SIGNATURE_ELEMENT, signedElementArray[0].getSignatureElement()); } } catch (VariableNotSettableException variableNotSettableException) { throw ServerRequireWssSignedElement.a(variableNotSettableException); } this.a(policyEnforcementContext, RequireWssSignedElement.VAR_TOKEN_TYPE, signingSecurityToken.getType().getCategory()); if (signingSecurityToken instanceof SamlSecurityToken) { SamlSecurityToken samlSecurityToken = (SamlSecurityToken)signingSecurityToken; this.a(policyEnforcementContext, RequireWssSignedElement.VAR_TOKEN_ELEMENT, samlSecurityToken.asElement()); String[] stringArray = j; this.a(policyEnforcementContext, RequireWssSignedElement.VAR_TOKEN_ATTRIBUTES + stringArray[3], samlSecurityToken.getIssuerCertificate()); this.a(policyEnforcementContext, RequireWssSignedElement.VAR_TOKEN_ATTRIBUTES + stringArray[2], samlSecurityToken.getSubjectCertificate()); this.a(policyEnforcementContext, RequireWssSignedElement.VAR_TOKEN_ATTRIBUTES + stringArray[1], samlSecurityToken.getMessageSigningCertificate()); } else if (signingSecurityToken instanceof X509SigningSecurityToken) { X509SigningSecurityToken x509SigningSecurityToken = (X509SigningSecurityToken)signingSecurityToken; this.a(policyEnforcementContext, RequireWssSignedElement.VAR_TOKEN_ELEMENT, x509SigningSecurityToken.asElement()); this.a(policyEnforcementContext, RequireWssSignedElement.VAR_TOKEN_ATTRIBUTES, x509SigningSecurityToken.getMessageSigningCertificate()); } } } } private void a(PolicyEnforcementContext policyEnforcementContext, String string, Object object) { try { policyEnforcementContext.setVariable(this.a(string), object); } catch (VariableNotSettableException variableNotSettableException) { this.logAndAudit((AuditDetailMessage)AssertionMessages.VARIABLE_NOTSET, variableNotSettableException.getVariable()); } } /* * Unable to fully structure code */ static { block10: { block9: { var5 = new String[6]; var3_1 = 0; var2_2 = "n)\u000b$D%$h%\u000e$[w\"{#\u0014$X}jh\u0005oZf9k/\u0005k\\w\u0014#5\u0013hBw3yh\u0005oZf9k/\u0005k\\w\u0013#/\u0015y]w\"#%\u0003x\\{6d%\u0007~M"; var4_3 = "n)\u000b$D%$h%\u000e$[w\"{#\u0014$X}jh\u0005oZf9k/\u0005k\\w\u0014#5\u0013hBw3yh\u0005oZf9k/\u0005k\\w\u0013#/\u0015y]w\"#%\u0003x\\{6d%\u0007~M".length(); var1_4 = 54; var0_5 = -1; lbl7: // 2 sources while (true) { v0 = 96; v1 = ++var0_5; v2 = var2_2.substring(v1, v1 + var1_4); v3 = -1; break block9; break; } lbl13: // 1 sources while (true) { var5[var3_1++] = ServerRequireWssSignedElement.d(v0, ServerRequireWssSignedElement.c(v2)); if ((var0_5 += var1_4) < var4_3) { var1_4 = var2_2.charAt(var0_5); ** continue; } var2_2 = "\u0011@n\u000b\"\u0019\u001f&@n\u00004\t\u001f\u0003En\n5\u0014K\nD)\u000b(\t\u001f\u0003Jj\u00007\tZ\u0006\u0013)"; var4_3 = "\u0011@n\u000b\"\u0019\u001f&@n\u00004\t\u001f\u0003En\n5\u0014K\nD)\u000b(\t\u001f\u0003Jj\u00007\tZ\u0006\u0013)".length(); var1_4 = 6; var0_5 = -1; lbl22: // 2 sources while (true) { v0 = 15; v4 = ++var0_5; v2 = var2_2.substring(v4, v4 + var1_4); v3 = 0; break block9; break; } break; } lbl28: // 1 sources while (true) { var5[var3_1++] = ServerRequireWssSignedElement.d(v0, ServerRequireWssSignedElement.c(v2)); if ((var0_5 += var1_4) < var4_3) { var1_4 = var2_2.charAt(var0_5); ** continue; } break block10; break; } } switch (v3) { default: { ** continue; } ** case 0: lbl39: // 1 sources ** continue; } } ServerRequireWssSignedElement.j = var5; ServerRequireWssSignedElement.h = ConfigFactory.getBooleanProperty((String)ServerRequireWssSignedElement.j[0], (boolean)true); } private static VariableNotSettableException a(VariableNotSettableException variableNotSettableException) { return variableNotSettableException; } private static char[] c(String string) { char[] cArray = string.toCharArray(); if (cArray.length < 2) { cArray = cArray; cArray[0] = (char)(cArray[0] ^ 0x30); } return cArray; } /* * Handled impossible loop by duplicating code * Enabled aggressive block sorting */ private static String d(int n2, char[] cArray) { char[] cArray2; block11: { int n3; int n4; int n5; block10: { n5 = n2; cArray2 = cArray; n4 = cArray.length; n3 = 0; if (!true) break block10; n4 = n4; if (n4 <= n3) break block11; } do { n5 = n5; cArray2 = cArray2; int n6 = n3; cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) { case 0 -> 109; case 1 -> 38; case 2 -> 6; case 3 -> 106; case 4 -> 72; case 5 -> 114; default -> 48; }))); ++n3; n4 = n4; } while (n4 > n3); } return new String(cArray2).intern(); } }