package com.l7tech.server.identity.cert;

import com.l7tech.common.io.CertUtils;
import com.l7tech.gateway.common.audit.Audit;
import com.l7tech.identity.BadCredentialsException;
import com.l7tech.identity.InvalidClientCertificateException;
import com.l7tech.identity.MissingCredentialsException;
import com.l7tech.identity.User;
import com.l7tech.identity.cert.ClientCertManager;
import com.l7tech.objectmodel.FindException;
import com.l7tech.objectmodel.ObjectModelException;
import com.l7tech.policy.assertion.credential.CredentialFormat;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.security.types.CertificateValidationResult;
import com.l7tech.security.types.CertificateValidationType;
import com.l7tech.server.identity.AuthenticationResult;
import com.l7tech.server.security.cert.CertValidationProcessor;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.xml.saml.SamlAssertion;
import java.security.GeneralSecurityException;
import java.security.cert.X509Certificate;
import java.text.MessageFormat;
import java.util.logging.Level;
import java.util.logging.Logger;

public class CertificateAuthenticator {
   private static final Logger a;
   private final ClientCertManager b;
   private final CertValidationProcessor c;
   private static final String[] d;

   public CertificateAuthenticator(ClientCertManager var1, CertValidationProcessor var2) {
      this.b = var1;
      this.c = var2;
   }

   public AuthenticationResult authenticateX509Credentials(
      LoginCredentials var1, X509Certificate var2, User var3, CertificateValidationType var4, Audit var5, boolean var6
   ) throws BadCredentialsException, MissingCredentialsException, InvalidClientCertificateException {
      Object var9;
      label89: {
         CredentialFormat var7 = var1.getFormat();
         X509Certificate var8 = null;
         var9 = var1.getPayload();
         if (var7.isClientCert()) {
            var8 = (X509Certificate)var9;
         } else {
            label88: {
               try {
                  if (var7 != CredentialFormat.SAML) {
                     break label88;
                  }

                  if (!(var9 instanceof SamlAssertion)) {
                     break label89;
                  }
               } catch (GeneralSecurityException var21) {
                  throw a(var21);
               }

               SamlAssertion var10 = (SamlAssertion)var9;
               var8 = var10.getSubjectCertificate();
            }
         }

         if (var8 == null) {
            String[] var32 = d;
            String var23 = var32[12];
            a.severe(var23);
            throw new MissingCredentialsException(var23);
         }

         String var22 = var3.getLogin();

         label69: {
            try {
               if (var22 != null && var22.trim().length() >= 1) {
                  break label69;
               }
            } catch (GeneralSecurityException var20) {
               throw a(var20);
            }

            var22 = var3.getId();
         }

         if (var2 == null) {
            String[] var31 = d;
            String var26 = var31[0] + var22;
            a.warning(var26);
            throw new InvalidClientCertificateException(var26);
         }

         Logger var10000 = a;
         String var10001 = var8.getSerialNumber().toString();
         String[] var27 = d;
         var10000.fine(var27[2] + var10001);
         if (CertUtils.certsAreEqual(var8, var2)) {
            try {
               CertificateValidationResult var24 = this.c.check(new X509Certificate[]{var8}, null, var4, CertValidationProcessor.Facility.IDENTITY, var5);

               try {
                  if (var24 != CertificateValidationResult.OK) {
                     throw new InvalidClientCertificateException(var27[8] + CertUtils.getCertIdentifyingInformation(var8) + var27[1]);
                  }
               } catch (GeneralSecurityException var16) {
                  throw a(var16);
               }
            } catch (GeneralSecurityException var17) {
               String var34 = CertUtils.getCertIdentifyingInformation(var8);
               String var10003 = ExceptionUtils.getMessage(var17);
               var27 = d;
               throw new InvalidClientCertificateException(var27[9] + var34 + var27[13] + var10003, var17);
            }

            ObjectModelException var25;
            label57: {
               try {
                  a.finest(MessageFormat.format(d[6], var22));
                  if (var6) {
                     try {
                        this.b.forbidCertReset(var3);
                        return new AuthenticationResult(var3, var1.getSecurityTokens(), var8, this.b.isCertPossiblyStale(var8));
                     } catch (ObjectModelException var18) {
                        var25 = var18;
                        break label57;
                     }
                  }
               } catch (GeneralSecurityException var19) {
                  throw a(var19);
               }

               return new AuthenticationResult(var3, var1.getSecurityTokens(), var8, false);
            }

            var27 = d;
            a.log(Level.WARNING, var27[11], var25);
            return null;
         }

         var10001 = CertUtils.getCertIdentifyingInformation(var8);
         String var12 = CertUtils.getCertIdentifyingInformation(var2);
         String var13 = var10001;
         String var14 = var22;
         var27 = d;
         String var11 = var27[4] + var14 + var27[10] + var13 + var27[3] + var12 + "]";
         a.warning(var11);
         throw new InvalidClientCertificateException(var11);
      }

      String var10002 = var9.getClass().getName();
      String[] var15 = d;
      throw new BadCredentialsException(var15[5] + var10002);
   }

   public AuthenticationResult authenticateX509Credentials(LoginCredentials var1, User var2, CertificateValidationType var3, Audit var4) throws BadCredentialsException, MissingCredentialsException, InvalidClientCertificateException {
      X509Certificate var5;
      try {
         var5 = (X509Certificate)this.b.getUserCert(var2);
      } catch (FindException var7) {
         a.log(Level.SEVERE, d[7], var7);
         var5 = null;
      }

      return this.authenticateX509Credentials(var1, var5, var2, var3, var4, true);
   }

   static {
      String[] var5 = new String[14];
      int var3 = 0;
      String var2 = "\u0002%)\u001ec_\u0004%,`\u001egY\u0015l,f\bhIP*%{]s^\u0015>j3\u0011jy\u001crEP:+e\u0014bL\u0004%%g]gC\u0014c%{]tH\u0006#)h\toB\u001el)a\u0018eF\u0019\"-)\u001bgD\u001c).\u0018\u001e/x\bc^\u0004l)l\u000fr\r\u0003)8`\u001cj\u000eP%9)<\u0011j$]tH\u00019/z\t&N\u0015>>`\u001boN\u00118/)\u0019iH\u0003\"m}]kL\u0004/\")\u0019gY\u0011.+z\u0018&N\u0015>>`\u001boN\u00118/)&\u001c\n+`\u0011cIP8%)\u001csY\u0018)$}\u0014eL\u0004)j|\u000ec_P!\u0019$z\bv]\u001f>>l\u0019&~1\u0001\u0006)<u^\u0015>>`\u0012h\r\u00045:lG&1\r?}\u0015cC\u0004%)h\tcIP99l\u000f&V@1j|\u000eoC\u0017l+)\u001ejD\u0015\">)\u001ec_\u0004%,`\u001egY\u0015-\n#g\u0019CU\u0013):}\u0014iCP)2j\u0018vY\u0019#$)\u0011iB\u001b%$n]`B\u0002l?z\u0018t\r\u0013)8}\r\u000f/{\toK\u0019/+}\u0018&v\r\u000f/{\toK\u0019/+}\u0018&v\u001dl?z\u0014hJP-jj\u0011oH\u001e8jj\u0018tY\u0019*#j\u001crHP\u0017(88h\u0013uL\u00138#f\u0013&H\u0002>%{]g_\u001f9$m]`B\u0002.#m>c_\u0004\u001e/z\u0018r";
      int var4 = "\u0002%)\u001ec_\u0004%,`\u001egY\u0015l,f\bhIP*%{]s^\u0015>j3\u0011jy\u001crEP:+e\u0014bL\u0004%%g]gC\u0014c%{]tH\u0006#)h\toB\u001el)a\u0018eF\u0019\"-)\u001bgD\u001c).\u0018\u001e/x\bc^\u0004l)l\u000fr\r\u0003)8`\u001cj\u000eP%9)<\u0011j$]tH\u00019/z\t&N\u0015>>`\u001boN\u00118/)\u0019iH\u0003\"m}]kL\u0004/\")\u0019gY\u0011.+z\u0018&N\u0015>>`\u001boN\u00118/)&\u001c\n+`\u0011cIP8%)\u001csY\u0018)$}\u0014eL\u0004)j|\u000ec_P!\u0019$z\bv]\u001f>>l\u0019&~1\u0001\u0006)<u^\u0015>>`\u0012h\r\u00045:lG&1\r?}\u0015cC\u0004%)h\tcIP99l\u000f&V@1j|\u000eoC\u0017l+)\u001ejD\u0015\">)\u001ec_\u0004%,`\u001egY\u0015-\n#g\u0019CU\u0013):}\u0014iCP)2j\u0018vY\u0019#$)\u0011iB\u001b%$n]`B\u0002l?z\u0018t\r\u0013)8}\r\u000f/{\toK\u0019/+}\u0018&v\r\u000f/{\toK\u0019/+}\u0018&v\u001dl?z\u0014hJP-jj\u0011oH\u001e8jj\u0018tY\u0019*#j\u001crHP\u0017(88h\u0013uL\u00138#f\u0013&H\u0002>%{]g_\u001f9$m]`B\u0002.#m>c_\u0004\u001e/z\u0018r"
         .length();
      char var1 = 30;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 39;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     d = var5;
                     a = Logger.getLogger(CertificateAuthenticator.class.getName());
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "Du\"R9\u0004^6g2T|\u0004_f`<T9\u0013\nb\u007fsD3\u0019^wy=\u0007=WIsb'N:\u001eIwd6\u000b|\u0015_b07H9\u0004\nx\u007f'\u0014K0%F0\u001eNwd:H2WLwy?B8M";
                  var4 = "Du\"R9\u0004^6g2T|\u0004_f`<T9\u0013\nb\u007fsD3\u0019^wy=\u0007=WIsb'N:\u001eIwd6\u000b|\u0015_b07H9\u0004\nx\u007f'\u0014K0%F0\u001eNwd:H2WLwy?B8M"
                     .length();
                  var1 = ';';
                  var7 = -1;
            }

            var10000 = 125;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static GeneralSecurityException a(GeneralSecurityException var0) {
      return var0;
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 87);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 107;
            case 1 -> 109;
            case 2 -> 46;
            case 3 -> 90;
            case 4 -> 33;
            case 5 -> 10;
            default -> 87;
         });
      }

      return new String(var10001).intern();
   }
}