package com.l7tech.server.identity.fed;

import com.l7tech.common.io.CertUtils;
import com.l7tech.identity.AuthenticationException;
import com.l7tech.identity.BadCredentialsException;
import com.l7tech.identity.InvalidClientCertificateException;
import com.l7tech.identity.cert.ClientCertManager;
import com.l7tech.identity.fed.FederatedIdentityProviderConfig;
import com.l7tech.identity.fed.FederatedUser;
import com.l7tech.objectmodel.FindException;
import com.l7tech.objectmodel.Goid;
import com.l7tech.security.types.CertificateValidationResult;
import com.l7tech.server.audit.Auditor;
import com.l7tech.server.identity.cert.TrustedCertServices;
import com.l7tech.server.security.cert.CertValidationProcessor;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Set;

class a {
   protected final FederatedIdentityProvider provider;
   protected final TrustedCertServices trustedCertServices;
   protected final CertValidationProcessor certValidationProcessor;
   protected final Auditor auditor;
   protected final Set<Goid> certOidSet;
   protected final FederatedIdentityProviderConfig providerConfig;
   protected final ClientCertManager clientCertManager;
   private static final String[] c;

   a(FederatedIdentityProvider var1, TrustedCertServices var2, ClientCertManager var3, CertValidationProcessor var4, Auditor var5, Set var6) {
      this.provider = var1;
      this.trustedCertServices = var2;
      this.clientCertManager = var3;
      this.certValidationProcessor = var4;
      this.auditor = var5;
      this.certOidSet = var6;
      this.providerConfig = (FederatedIdentityProviderConfig)var1.getConfig();
   }

   protected void checkCertificateMatch(FederatedUser param1, X509Certificate param2) throws FindException, BadCredentialsException {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: aload 0
      // 01: getfield com/l7tech/server/identity/fed/a.clientCertManager Lcom/l7tech/identity/cert/ClientCertManager;
      // 04: aload 1
      // 05: invokeinterface com/l7tech/identity/cert/ClientCertManager.getUserCert (Lcom/l7tech/identity/User;)Ljava/security/cert/Certificate; 2
      // 0a: checkcast java/security/cert/X509Certificate
      // 0d: astore 3
      // 0e: aload 3
      // 0f: ifnonnull 46
      // 12: aload 0
      // 13: getfield com/l7tech/server/identity/fed/a.certOidSet Ljava/util/Set;
      // 16: invokeinterface java/util/Set.isEmpty ()Z 1
      // 1b: ifeq 88
      // 1e: goto 25
      // 21: invokestatic com/l7tech/server/identity/fed/a.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 24: athrow
      // 25: new com/l7tech/identity/BadCredentialsException
      // 28: dup
      // 29: aload 1
      // 2a: invokestatic java/lang/String.valueOf (Ljava/lang/Object;)Ljava/lang/String;
      // 2d: getstatic com/l7tech/server/identity/fed/a.c [Ljava/lang/String;
      // 30: bipush 3
      // 31: aaload
      // 32: swap
      // 33: getstatic com/l7tech/server/identity/fed/a.c [Ljava/lang/String;
      // 36: bipush 8
      // 38: aaload
      // 39: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001" ]
      // 3e: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // 41: athrow
      // 42: invokestatic com/l7tech/server/identity/fed/a.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 45: athrow
      // 46: aload 3
      // 47: aload 2
      // 48: invokestatic com/l7tech/common/io/CertUtils.certsAreEqual (Ljava/security/cert/X509Certificate;Ljava/security/cert/X509Certificate;)Z
      // 4b: ifne 88
      // 4e: new com/l7tech/identity/BadCredentialsException
      // 51: dup
      // 52: aload 2
      // 53: invokestatic com/l7tech/common/io/CertUtils.getCertIdentifyingInformation (Ljava/security/cert/X509Certificate;)Ljava/lang/String;
      // 56: aload 1
      // 57: invokestatic java/lang/String.valueOf (Ljava/lang/Object;)Ljava/lang/String;
      // 5a: aload 3
      // 5b: invokestatic com/l7tech/common/io/CertUtils.getCertIdentifyingInformation (Ljava/security/cert/X509Certificate;)Ljava/lang/String;
      // 5e: astore 4
      // 60: astore 5
      // 62: astore 6
      // 64: getstatic com/l7tech/server/identity/fed/a.c [Ljava/lang/String;
      // 67: astore 7
      // 69: aload 7
      // 6b: bipush 7
      // 6d: aaload
      // 6e: aload 6
      // 70: aload 7
      // 72: bipush 6
      // 74: aaload
      // 75: aload 5
      // 77: aload 7
      // 79: bipush 0
      // 7a: aaload
      // 7b: aload 4
      // 7d: ldc "]"
      // 7f: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001\u0001\u0001\u0001\u0001" ]
      // 84: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // 87: athrow
      // 88: return
      // try (6 -> 12): 13 com/l7tech/objectmodel/FindException
      // try (8 -> 29): 29 com/l7tech/objectmodel/FindException
   }

   protected void validateCertificate(X509Certificate var1, boolean var2) throws AuthenticationException {
      try {
         CertificateValidationResult var3 = this.certValidationProcessor
            .check(
               new X509Certificate[]{var1}, null, this.providerConfig.getCertificateValidationType(), CertValidationProcessor.Facility.IDENTITY, this.auditor
            );

         try {
            if (var3 != CertificateValidationResult.OK) {
               this.exceptionForType(c[2] + CertUtils.getCertIdentifyingInformation(var1) + c[4], null, var2);
            }
         } catch (CertificateException var5) {
            throw a(var5);
         }
      } catch (CertificateException var6) {
         String var10001 = CertUtils.getCertIdentifyingInformation(var1);
         String[] var4 = c;
         this.exceptionForType(var4[1] + var10001 + var4[5], var6, var2);
      }
   }

   protected void exceptionForType(String var1, Throwable var2, boolean var3) throws AuthenticationException {
      try {
         if (var3) {
            throw new InvalidClientCertificateException(var1, var2);
         }
      } catch (AuthenticationException var4) {
         throw a(var4);
      }

      throw new AuthenticationException(var1, var2);
   }

   protected FederatedUserManager getUserManager() {
      return (FederatedUserManager)this.provider.getUserManager();
   }

   protected FederatedGroupManager getGroupManager() {
      return (FederatedGroupManager)this.provider.getGroupManager();
   }

   private static Exception a(Exception var0) {
      return var0;
   }

   static {
      String[] var5 = new String[9];
      int var3 = 0;
      String var2 = "\u0001@?\u0011\u0004\u0011G2\u000f/^\f\u0003\u0013?\b{\u000e\u0013\u0007\u00115\u000f.\r\r\u001bG5\r+\u0011\u0013\u0016\u00028@8\u001b\u0013\u0016\u000e:\t8\u001f\u0015\u0007G\u0007\r\u001f\u0005)\n\b\u0004\u000e?\u0001/\u001bA9\r\u001f\u0005)\n\b\u0004\u000e?\u0001/\u001bA9\u0005\t\u0013>\fA3\u0001@+\u001f\u0015\nG*\u00017\u0017\u0005\u0003\u00135\u000f5^\u0000\f\u0003s\u000f)^\u0013\u0007\u00113\u0003:\n\b\r\t|\u00033\u001b\u0002\t\u000e2\u0007{\u0018\u0000\u000b\u000b9\u00042\u0001@+\u001f\u0015\nG*\u00017\u0017\u0005\u0003\u00135\u000f5^\u0000\f\u0003s\u000f)^\u0013\u0007\u00113\u0003:\n\b\r\t|\u00033\u001b\u0002\t\u000e2\u0007{\u001b\u0013\u0010\b.\u000b\u0001@=\u0011\u0013B\u0012/\u0005)^";
      int var4 = "\u0001@?\u0011\u0004\u0011G2\u000f/^\f\u0003\u0013?\b{\u000e\u0013\u0007\u00115\u000f.\r\r\u001bG5\r+\u0011\u0013\u0016\u00028@8\u001b\u0013\u0016\u000e:\t8\u001f\u0015\u0007G\u0007\r\u001f\u0005)\n\b\u0004\u000e?\u0001/\u001bA9\r\u001f\u0005)\n\b\u0004\u000e?\u0001/\u001bA9\u0005\t\u0013>\fA3\u0001@+\u001f\u0015\nG*\u00017\u0017\u0005\u0003\u00135\u000f5^\u0000\f\u0003s\u000f)^\u0013\u0007\u00113\u0003:\n\b\r\t|\u00033\u001b\u0002\t\u000e2\u0007{\u0018\u0000\u000b\u000b9\u00042\u0001@+\u001f\u0015\nG*\u00017\u0017\u0005\u0003\u00135\u000f5^\u0000\f\u0003s\u000f)^\u0013\u0007\u00113\u0003:\n\b\r\t|\u00033\u001b\u0002\t\u000e2\u0007{\u001b\u0013\u0010\b.\u000b\u0001@=\u0011\u0013B\u0012/\u0005)^"
         .length();
      char var1 = '2';
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 86;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     c = var5;
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "`kDej\u007f}\u0012mPb{eo[mTdj,Rj\u0012fTc/bf\u0012mYyjb}\u0012mPb{eo[mTdj,`_~Zb{im\u001e.T~k,}ZgF0IimW|Tdjh){jP~{e}K.eb`z`VkG0gmz\u0012`Z0LM)QkGd|,}ZoA0n~l\u0012zGe|xlV";
                  var4 = "`kDej\u007f}\u0012mPb{eo[mTdj,Rj\u0012fTc/bf\u0012mYyjb}\u0012mPb{eo[mTdj,`_~Zb{im\u001e.T~k,}ZgF0IimW|Tdjh){jP~{e}K.eb`z`VkG0gmz\u0012`Z0LM)QkGd|,}ZoA0n~l\u0012zGe|xlV"
                     .length();
                  var1 = 21;
                  var7 = -1;
            }

            var10000 = 56;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 49);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 10;
            case 1 -> 54;
            case 2 -> 13;
            case 3 -> 40;
            case 4 -> 55;
            case 5 -> 52;
            default -> 49;
         });
      }

      return new String(var10001).intern();
   }
}