package com.l7tech.server.identity.fed;

import com.l7tech.common.io.CertUtils;
import com.l7tech.identity.AuthenticationException;
import com.l7tech.identity.BadCredentialsException;
import com.l7tech.identity.User;
import com.l7tech.identity.cert.ClientCertManager;
import com.l7tech.identity.fed.FederatedUser;
import com.l7tech.objectmodel.FindException;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.security.cert.TrustedCert;
import com.l7tech.security.cert.TrustedCert.TrustedFor;
import com.l7tech.server.audit.Auditor;
import com.l7tech.server.identity.cert.TrustedCertServices;
import com.l7tech.server.security.cert.CertValidationProcessor;
import com.l7tech.xml.saml.SamlAssertion;
import java.security.cert.X509Certificate;
import java.util.EnumSet;
import java.util.Set;
import java.util.logging.Level;
import java.util.logging.Logger;

class b extends a {
   private static final Logger a;
   private static final String[] b;

   b(FederatedIdentityProvider var1, TrustedCertServices var2, ClientCertManager var3, CertValidationProcessor var4, Auditor var5, Set var6) {
      super(var1, var2, var3, var4, var5, var6);
   }

   User a(LoginCredentials param1) throws AuthenticationException {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 000: aload 0
      // 001: getfield com/l7tech/server/identity/fed/b.providerConfig Lcom/l7tech/identity/fed/FederatedIdentityProviderConfig;
      // 004: invokevirtual com/l7tech/identity/fed/FederatedIdentityProviderConfig.isSamlSupported ()Z
      // 007: ifne 01c
      // 00a: new com/l7tech/identity/BadCredentialsException
      // 00d: dup
      // 00e: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 011: bipush 7
      // 013: aaload
      // 014: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // 017: athrow
      // 018: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 01b: athrow
      // 01c: aload 1
      // 01d: invokevirtual com/l7tech/policy/assertion/credential/LoginCredentials.getSecurityToken ()Lcom/l7tech/security/token/SecurityToken;
      // 020: astore 2
      // 021: aload 2
      // 022: instanceof com/l7tech/xml/saml/SamlAssertion
      // 025: ifne 03a
      // 028: new com/l7tech/identity/BadCredentialsException
      // 02b: dup
      // 02c: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 02f: bipush 16
      // 031: aaload
      // 032: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // 035: athrow
      // 036: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 039: athrow
      // 03a: aload 2
      // 03b: checkcast com/l7tech/xml/saml/SamlAssertion
      // 03e: astore 3
      // 03f: aconst_null
      // 040: astore 4
      // 042: aconst_null
      // 043: astore 5
      // 045: aload 3
      // 046: invokevirtual com/l7tech/xml/saml/SamlAssertion.getSubjectCertificate ()Ljava/security/cert/X509Certificate;
      // 049: astore 6
      // 04b: aload 6
      // 04d: ifnull 05e
      // 050: aload 6
      // 052: invokestatic com/l7tech/common/io/CertUtils.getSubjectDN (Ljava/security/cert/X509Certificate;)Ljava/lang/String;
      // 055: astore 4
      // 057: aload 6
      // 059: invokestatic com/l7tech/common/io/CertUtils.getIssuerDN (Ljava/security/cert/X509Certificate;)Ljava/lang/String;
      // 05c: astore 5
      // 05e: aload 3
      // 05f: invokevirtual com/l7tech/xml/saml/SamlAssertion.getIssuerCertificate ()Ljava/security/cert/X509Certificate;
      // 062: astore 7
      // 064: aload 7
      // 066: ifnonnull 08c
      // 069: aload 4
      // 06b: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 06e: astore 14
      // 070: aload 14
      // 072: bipush 25
      // 074: aaload
      // 075: swap
      // 076: aload 14
      // 078: bipush 22
      // 07a: aaload
      // 07b: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001" ]
      // 080: astore 8
      // 082: new com/l7tech/identity/BadCredentialsException
      // 085: dup
      // 086: aload 8
      // 088: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // 08b: athrow
      // 08c: aload 7
      // 08e: invokestatic com/l7tech/common/io/CertUtils.getSubjectDN (Ljava/security/cert/X509Certificate;)Ljava/lang/String;
      // 091: astore 8
      // 093: aload 0
      // 094: aload 7
      // 096: aload 8
      // 098: invokevirtual com/l7tech/server/identity/fed/b.a (Ljava/security/cert/X509Certificate;Ljava/lang/String;)V
      // 09b: aload 3
      // 09c: invokevirtual com/l7tech/xml/saml/SamlAssertion.isSenderVouches ()Z
      // 09f: ifeq 0d5
      // 0a2: aload 3
      // 0a3: invokevirtual com/l7tech/xml/saml/SamlAssertion.getAttestingEntity ()Ljava/security/cert/X509Certificate;
      // 0a6: astore 9
      // 0a8: aload 9
      // 0aa: ifnonnull 0be
      // 0ad: new com/l7tech/identity/AuthenticationException
      // 0b0: dup
      // 0b1: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 0b4: bipush 4
      // 0b5: aaload
      // 0b6: invokespecial com/l7tech/identity/AuthenticationException.<init> (Ljava/lang/String;)V
      // 0b9: athrow
      // 0ba: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 0bd: athrow
      // 0be: aload 9
      // 0c0: aload 7
      // 0c2: invokestatic com/l7tech/common/io/CertUtils.certsAreEqual (Ljava/security/cert/X509Certificate;Ljava/security/cert/X509Certificate;)Z
      // 0c5: ifne 0d5
      // 0c8: aload 0
      // 0c9: aload 9
      // 0cb: invokevirtual com/l7tech/server/identity/fed/b.a (Ljava/security/cert/X509Certificate;)V
      // 0ce: goto 0d5
      // 0d1: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 0d4: athrow
      // 0d5: aload 6
      // 0d7: ifnull 1de
      // 0da: aload 5
      // 0dc: ifnull 1de
      // 0df: goto 0e6
      // 0e2: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 0e5: athrow
      // 0e6: aload 0
      // 0e7: getfield com/l7tech/server/identity/fed/b.trustedCertServices Lcom/l7tech/server/identity/cert/TrustedCertServices;
      // 0ea: aload 5
      // 0ec: bipush 1
      // 0ed: getstatic com/l7tech/security/cert/TrustedCert$TrustedFor.SIGNING_CLIENT_CERTS Lcom/l7tech/security/cert/TrustedCert$TrustedFor;
      // 0f0: invokestatic java/util/EnumSet.of (Ljava/lang/Enum;)Ljava/util/EnumSet;
      // 0f3: aload 0
      // 0f4: getfield com/l7tech/server/identity/fed/b.certOidSet Ljava/util/Set;
      // 0f7: invokeinterface com/l7tech/server/identity/cert/TrustedCertServices.getCertsBySubjectDnFiltered (Ljava/lang/String;ZLjava/util/Set;Ljava/util/Set;)Ljava/util/Collection; 5
      // 0fc: astore 9
      // 0fe: aload 9
      // 100: invokeinterface java/util/Collection.iterator ()Ljava/util/Iterator; 1
      // 105: astore 10
      // 107: aload 10
      // 109: invokeinterface java/util/Iterator.hasNext ()Z 1
      // 10e: ifeq 181
      // 111: aload 10
      // 113: invokeinterface java/util/Iterator.next ()Ljava/lang/Object; 1
      // 118: checkcast com/l7tech/security/cert/TrustedCert
      // 11b: astore 11
      // 11d: aload 11
      // 11f: invokevirtual com/l7tech/security/cert/TrustedCert.getCertificate ()Ljava/security/cert/X509Certificate;
      // 122: astore 12
      // 124: aload 6
      // 126: aload 12
      // 128: invokestatic com/l7tech/security/cert/CertVerifier.cachedVerify (Ljava/security/cert/X509Certificate;Ljava/security/cert/X509Certificate;)V
      // 12b: aload 0
      // 12c: aload 6
      // 12e: bipush 1
      // 12f: invokevirtual com/l7tech/server/identity/fed/b.validateCertificate (Ljava/security/cert/X509Certificate;Z)V
      // 132: goto 17e
      // 135: astore 13
      // 137: new com/l7tech/identity/AuthenticationException
      // 13a: dup
      // 13b: aload 8
      // 13d: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 140: astore 14
      // 142: aload 14
      // 144: bipush 2
      // 145: aaload
      // 146: swap
      // 147: ldc "'"
      // 149: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001" ]
      // 14e: aload 13
      // 150: invokespecial com/l7tech/identity/AuthenticationException.<init> (Ljava/lang/String;Ljava/lang/Throwable;)V
      // 153: athrow
      // 154: astore 13
      // 156: new com/l7tech/identity/AuthenticationException
      // 159: dup
      // 15a: aload 4
      // 15c: aload 13
      // 15e: invokevirtual java/security/GeneralSecurityException.getMessage ()Ljava/lang/String;
      // 161: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 164: astore 14
      // 166: aload 14
      // 168: bipush 20
      // 16a: aaload
      // 16b: dup_x2
      // 16c: pop
      // 16d: aload 14
      // 16f: bipush 12
      // 171: aaload
      // 172: swap
      // 173: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001\u0001" ]
      // 178: aload 13
      // 17a: invokespecial com/l7tech/identity/AuthenticationException.<init> (Ljava/lang/String;Ljava/lang/Throwable;)V
      // 17d: athrow
      // 17e: goto 107
      // 181: goto 1de
      // 184: astore 9
      // 186: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 189: astore 14
      // 18b: aload 14
      // 18d: bipush 26
      // 18f: aaload
      // 190: astore 10
      // 192: getstatic com/l7tech/server/identity/fed/b.a Ljava/util/logging/Logger;
      // 195: getstatic java/util/logging/Level.SEVERE Ljava/util/logging/Level;
      // 198: aload 14
      // 19a: bipush 6
      // 19c: aaload
      // 19d: aload 9
      // 19f: invokevirtual java/util/logging/Logger.log (Ljava/util/logging/Level;Ljava/lang/String;Ljava/lang/Throwable;)V
      // 1a2: new com/l7tech/identity/AuthenticationException
      // 1a5: dup
      // 1a6: aload 14
      // 1a8: bipush 6
      // 1aa: aaload
      // 1ab: aload 9
      // 1ad: invokespecial com/l7tech/identity/AuthenticationException.<init> (Ljava/lang/String;Ljava/lang/Throwable;)V
      // 1b0: athrow
      // 1b1: astore 9
      // 1b3: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 1b6: astore 14
      // 1b8: aload 14
      // 1ba: bipush 9
      // 1bc: aaload
      // 1bd: astore 10
      // 1bf: getstatic com/l7tech/server/identity/fed/b.a Ljava/util/logging/Logger;
      // 1c2: getstatic java/util/logging/Level.WARNING Ljava/util/logging/Level;
      // 1c5: aload 14
      // 1c7: bipush 21
      // 1c9: aaload
      // 1ca: aload 9
      // 1cc: invokevirtual java/util/logging/Logger.log (Ljava/util/logging/Level;Ljava/lang/String;Ljava/lang/Throwable;)V
      // 1cf: new com/l7tech/identity/AuthenticationException
      // 1d2: dup
      // 1d3: aload 14
      // 1d5: bipush 21
      // 1d7: aaload
      // 1d8: aload 9
      // 1da: invokespecial com/l7tech/identity/AuthenticationException.<init> (Ljava/lang/String;Ljava/lang/Throwable;)V
      // 1dd: athrow
      // 1de: aload 6
      // 1e0: ifnull 1fd
      // 1e3: aload 4
      // 1e5: ifnull 1fd
      // 1e8: goto 1ef
      // 1eb: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 1ee: athrow
      // 1ef: aload 0
      // 1f0: aload 3
      // 1f1: aload 4
      // 1f3: aload 6
      // 1f5: invokevirtual com/l7tech/server/identity/fed/b.a (Lcom/l7tech/xml/saml/SamlAssertion;Ljava/lang/String;Ljava/security/cert/X509Certificate;)Lcom/l7tech/identity/User;
      // 1f8: areturn
      // 1f9: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 1fc: athrow
      // 1fd: aload 3
      // 1fe: invokevirtual com/l7tech/xml/saml/SamlAssertion.getNameIdentifierFormat ()Ljava/lang/String;
      // 201: astore 9
      // 203: aload 3
      // 204: invokevirtual com/l7tech/xml/saml/SamlAssertion.getNameIdentifierValue ()Ljava/lang/String;
      // 207: astore 10
      // 209: getstatic com/l7tech/security/saml/SamlConstants.NAMEIDENTIFIER_UNSPECIFIED Ljava/lang/String;
      // 20c: aload 9
      // 20e: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 211: ifne 220
      // 214: aload 9
      // 216: ifnonnull 25a
      // 219: goto 220
      // 21c: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 21f: athrow
      // 220: aload 0
      // 221: invokevirtual com/l7tech/server/identity/fed/b.getUserManager ()Lcom/l7tech/server/identity/fed/FederatedUserManager;
      // 224: aload 10
      // 226: invokestatic com/l7tech/common/io/CertUtils.formatDN (Ljava/lang/String;)Ljava/lang/String;
      // 229: invokeinterface com/l7tech/server/identity/fed/FederatedUserManager.findBySubjectDN (Ljava/lang/String;)Lcom/l7tech/identity/fed/FederatedUser; 2
      // 22e: astore 11
      // 230: aload 11
      // 232: ifnonnull 242
      // 235: aload 0
      // 236: invokevirtual com/l7tech/server/identity/fed/b.getUserManager ()Lcom/l7tech/server/identity/fed/FederatedUserManager;
      // 239: aload 10
      // 23b: invokeinterface com/l7tech/server/identity/fed/FederatedUserManager.findByEmail (Ljava/lang/String;)Lcom/l7tech/identity/fed/FederatedUser; 2
      // 240: astore 11
      // 242: aload 11
      // 244: ifnonnull 2a3
      // 247: aload 0
      // 248: invokevirtual com/l7tech/server/identity/fed/b.getUserManager ()Lcom/l7tech/server/identity/fed/FederatedUserManager;
      // 24b: aload 10
      // 24d: invokeinterface com/l7tech/server/identity/fed/FederatedUserManager.findByLogin (Ljava/lang/String;)Lcom/l7tech/identity/User; 2
      // 252: checkcast com/l7tech/identity/fed/FederatedUser
      // 255: astore 11
      // 257: goto 2a3
      // 25a: getstatic com/l7tech/security/saml/SamlConstants.NAMEIDENTIFIER_EMAIL Ljava/lang/String;
      // 25d: aload 9
      // 25f: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 262: ifeq 275
      // 265: aload 0
      // 266: invokevirtual com/l7tech/server/identity/fed/b.getUserManager ()Lcom/l7tech/server/identity/fed/FederatedUserManager;
      // 269: aload 10
      // 26b: invokeinterface com/l7tech/server/identity/fed/FederatedUserManager.findByEmail (Ljava/lang/String;)Lcom/l7tech/identity/fed/FederatedUser; 2
      // 270: astore 11
      // 272: goto 2a3
      // 275: getstatic com/l7tech/security/saml/SamlConstants.NAMEIDENTIFIER_X509_SUBJECT Ljava/lang/String;
      // 278: aload 9
      // 27a: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 27d: ifeq 293
      // 280: aload 0
      // 281: invokevirtual com/l7tech/server/identity/fed/b.getUserManager ()Lcom/l7tech/server/identity/fed/FederatedUserManager;
      // 284: aload 10
      // 286: invokestatic com/l7tech/common/io/CertUtils.formatDN (Ljava/lang/String;)Ljava/lang/String;
      // 289: invokeinterface com/l7tech/server/identity/fed/FederatedUserManager.findBySubjectDN (Ljava/lang/String;)Lcom/l7tech/identity/fed/FederatedUser; 2
      // 28e: astore 11
      // 290: goto 2a3
      // 293: aload 0
      // 294: invokevirtual com/l7tech/server/identity/fed/b.getUserManager ()Lcom/l7tech/server/identity/fed/FederatedUserManager;
      // 297: aload 10
      // 299: invokeinterface com/l7tech/server/identity/fed/FederatedUserManager.findByLogin (Ljava/lang/String;)Lcom/l7tech/identity/User; 2
      // 29e: checkcast com/l7tech/identity/fed/FederatedUser
      // 2a1: astore 11
      // 2a3: aload 11
      // 2a5: ifnonnull 302
      // 2a8: aload 0
      // 2a9: getfield com/l7tech/server/identity/fed/b.certOidSet Ljava/util/Set;
      // 2ac: invokeinterface java/util/Set.isEmpty ()Z 1
      // 2b1: ifne 302
      // 2b4: goto 2bb
      // 2b7: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 2ba: athrow
      // 2bb: aload 4
      // 2bd: ifnonnull 2f6
      // 2c0: goto 2c7
      // 2c3: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 2c6: athrow
      // 2c7: getstatic com/l7tech/security/saml/SamlConstants.NAMEIDENTIFIER_X509_SUBJECT Ljava/lang/String;
      // 2ca: aload 9
      // 2cc: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 2cf: ifeq 2e8
      // 2d2: goto 2d9
      // 2d5: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 2d8: athrow
      // 2d9: aload 0
      // 2da: aload 10
      // 2dc: aload 9
      // 2de: aload 10
      // 2e0: invokevirtual com/l7tech/server/identity/fed/b.a (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/l7tech/identity/fed/FederatedUser;
      // 2e3: astore 11
      // 2e5: goto 302
      // 2e8: aload 0
      // 2e9: aconst_null
      // 2ea: aload 9
      // 2ec: aload 10
      // 2ee: invokevirtual com/l7tech/server/identity/fed/b.a (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/l7tech/identity/fed/FederatedUser;
      // 2f1: astore 11
      // 2f3: goto 302
      // 2f6: aload 0
      // 2f7: aload 4
      // 2f9: aload 9
      // 2fb: aload 10
      // 2fd: invokevirtual com/l7tech/server/identity/fed/b.a (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/l7tech/identity/fed/FederatedUser;
      // 300: astore 11
      // 302: aload 11
      // 304: areturn
      // 305: astore 11
      // 307: new com/l7tech/identity/AuthenticationException
      // 30a: dup
      // 30b: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 30e: bipush 14
      // 310: aaload
      // 311: invokespecial com/l7tech/identity/AuthenticationException.<init> (Ljava/lang/String;)V
      // 314: athrow
      // try (102 -> 106): 107 java/security/cert/CertificateException
      // try (92 -> 99): 100 java/security/cert/CertificateException
      // try (81 -> 90): 90 java/security/cert/CertificateException
      // try (16 -> 26): 26 java/security/cert/CertificateException
      // try (0 -> 11): 11 java/security/cert/CertificateException
      // try (129 -> 139): 140 java/security/cert/CertificateException
      // try (129 -> 139): 155 java/security/GeneralSecurityException
      // try (109 -> 177): 178 com/l7tech/objectmodel/FindException
      // try (109 -> 177): 200 java/lang/Exception
      // try (310 -> 319): 320 java/security/cert/CertificateException
      // try (303 -> 312): 313 java/security/cert/CertificateException
      // try (301 -> 307): 308 java/security/cert/CertificateException
      // try (243 -> 249): 250 java/security/cert/CertificateException
      // try (224 -> 235): 235 java/security/cert/CertificateException
      // try (222 -> 226): 227 java/security/cert/CertificateException
      // try (243 -> 343): 344 com/l7tech/objectmodel/FindException
   }

   private void a(X509Certificate var1, String var2) throws AuthenticationException {
      try {
         for (TrustedCert var5 : this.trustedCertServices.getCertsBySubjectDnFiltered(var2, true, EnumSet.of(TrustedFor.SAML_ISSUER), this.certOidSet)) {
            if (CertUtils.certsAreEqual(var1, var5.getCertificate())) {
               this.validateCertificate(var1, false);
               return;
            }
         }

         String[] var9 = b;
         throw new BadCredentialsException(var9[18] + var2 + var9[24]);
      } catch (FindException var7) {
         String[] var6 = b;
         String var4 = var6[17];
         a.log(Level.SEVERE, var6[13], var7);
         throw new AuthenticationException(var6[13], var7);
      }
   }

   private void a(X509Certificate var1) throws AuthenticationException {
      try {
         String var2 = CertUtils.getSubjectDN(var1);

         for (TrustedCert var5 : this.trustedCertServices
            .getCertsBySubjectDnFiltered(var2, true, EnumSet.of(TrustedFor.SAML_ATTESTING_ENTITY), this.certOidSet)) {
            if (CertUtils.certsAreEqual(var1, var5.getCertificate())) {
               this.validateCertificate(var1, false);
               return;
            }
         }

         String[] var9 = b;
         throw new BadCredentialsException(var9[8] + var2 + var9[0]);
      } catch (FindException var7) {
         String[] var6 = b;
         String var3 = var6[11];
         a.log(Level.SEVERE, var6[3], var7);
         throw new AuthenticationException(var6[3], var7);
      }
   }

   private User a(SamlAssertion var1, String var2, X509Certificate var3) throws AuthenticationException {
      String var4 = var1.getNameIdentifierFormat();
      String var5 = var1.getNameIdentifierValue();

      try {
         FederatedUser var6 = this.getUserManager().findBySubjectDN(CertUtils.formatDN(var2));

         try {
            if (var6 == null) {
               if (this.certOidSet.isEmpty()) {
                  return null;
               }

               return this.a(var2, var4, var5);
            }
         } catch (FindException var7) {
            throw b(var7);
         }

         this.checkCertificateMatch(var6, var3);
         return var6;
      } catch (FindException var8) {
         throw new AuthenticationException(b[1]);
      }
   }

   private FederatedUser a(String param1, String param2, String param3) throws BadCredentialsException {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: aload 3
      // 01: ifnonnull 15
      // 04: new com/l7tech/identity/BadCredentialsException
      // 07: dup
      // 08: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 0b: bipush 5
      // 0c: aaload
      // 0d: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // 10: athrow
      // 11: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 14: athrow
      // 15: new com/l7tech/identity/fed/FederatedUser
      // 18: dup
      // 19: aload 0
      // 1a: getfield com/l7tech/server/identity/fed/b.provider Lcom/l7tech/server/identity/fed/FederatedIdentityProvider;
      // 1d: invokeinterface com/l7tech/server/identity/fed/FederatedIdentityProvider.getConfig ()Lcom/l7tech/identity/IdentityProviderConfig; 1
      // 22: invokevirtual com/l7tech/identity/IdentityProviderConfig.getGoid ()Lcom/l7tech/objectmodel/Goid;
      // 25: aconst_null
      // 26: invokespecial com/l7tech/identity/fed/FederatedUser.<init> (Lcom/l7tech/objectmodel/Goid;Ljava/lang/String;)V
      // 29: astore 4
      // 2b: aload 4
      // 2d: aload 1
      // 2e: invokevirtual com/l7tech/identity/fed/FederatedUser.setSubjectDn (Ljava/lang/String;)V
      // 31: getstatic com/l7tech/security/saml/SamlConstants.NAMEIDENTIFIER_EMAIL Ljava/lang/String;
      // 34: aload 2
      // 35: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 38: ifeq 48
      // 3b: aload 4
      // 3d: aload 3
      // 3e: invokevirtual com/l7tech/identity/fed/FederatedUser.setEmail (Ljava/lang/String;)V
      // 41: goto b0
      // 44: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 47: athrow
      // 48: getstatic com/l7tech/security/saml/SamlConstants.NAMEIDENTIFIER_X509_SUBJECT Ljava/lang/String;
      // 4b: aload 2
      // 4c: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 4f: ifeq aa
      // 52: aload 1
      // 53: ifnonnull 7e
      // 56: goto 5d
      // 59: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 5c: athrow
      // 5d: new com/l7tech/identity/BadCredentialsException
      // 60: dup
      // 61: getstatic com/l7tech/security/saml/SamlConstants.NAMEIDENTIFIER_X509_SUBJECT Ljava/lang/String;
      // 64: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 67: bipush 19
      // 69: aaload
      // 6a: swap
      // 6b: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 6e: bipush 23
      // 70: aaload
      // 71: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001" ]
      // 76: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // 79: athrow
      // 7a: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 7d: athrow
      // 7e: aload 3
      // 7f: aload 1
      // 80: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 83: ifne b0
      // 86: new com/l7tech/identity/BadCredentialsException
      // 89: dup
      // 8a: aload 3
      // 8b: aload 1
      // 8c: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 8f: bipush 10
      // 91: aaload
      // 92: dup_x2
      // 93: pop
      // 94: getstatic com/l7tech/server/identity/fed/b.b [Ljava/lang/String;
      // 97: bipush 15
      // 99: aaload
      // 9a: swap
      // 9b: ldc "'"
      // 9d: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001\u0001\u0001" ]
      // a2: invokespecial com/l7tech/identity/BadCredentialsException.<init> (Ljava/lang/String;)V
      // a5: athrow
      // a6: invokestatic com/l7tech/server/identity/fed/b.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // a9: athrow
      // aa: aload 4
      // ac: aload 3
      // ad: invokevirtual com/l7tech/identity/fed/FederatedUser.setLogin (Ljava/lang/String;)V
      // b0: aload 4
      // b2: areturn
      // try (0 -> 9): 9 com/l7tech/identity/BadCredentialsException
      // try (20 -> 31): 31 com/l7tech/identity/BadCredentialsException
      // try (33 -> 39): 40 com/l7tech/identity/BadCredentialsException
      // try (37 -> 55): 55 com/l7tech/identity/BadCredentialsException
      // try (57 -> 78): 78 com/l7tech/identity/BadCredentialsException
   }

   static {
      String[] var5 = new String[27];
      int var3 = 0;
      String var2 = "UVlb0D9UMz!1L#\u001cEz&~D?UQp6~_?\u0000Lk':\u000b,\u0006\u001f^6*N>\u0001Vq%~n#\u0001Vk;~M\"\u0007\u001fk*7Xm3Z{',J9\u0010[?\u000b:N#\u0001Vk;~{?\u001aIv&;Y\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0$6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fv1-^(\u0007\u001f|',_$\u0013V|#*NmR@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010?!Wzb\u001f_9\u0010Lk+0Lm0Qk+*Rm6Zm67M$\u0016^k'~B>UMz3+B?\u0010[3b<^9UQp6~[?\u0010Lz,*N)#&J}(;H9Uq~/;\u000b\u0004\u0011Zq67M$\u0010M?+-\u000b?\u0010Nj+,N)>6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?ULj 4N.\u0001\u001f|',_$\u0013V|#*Nm\u0006Vx,;YD!Wv1~B)\u0010Qk+*Rm\u0005Mp47O(\u0007\u001fv1~E\"\u0001\u001f|-0M$\u0012Jm':\u000b9\u001a\u001fl7.[\"\u0007K?\u0011\u001ff\u0001U\\m':N#\u0001V~.-\u0011!Wzb=N?\u0001Vy+=J9\u0010\u001f8#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u0010;^r'\u0017O(\u001bKv$7N?U\u0018@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010\u0003R\u0005?46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0?R\u001fh#-\u000b,\u001b\u001fGlk\u001btUlj 4N.\u0001q~/;\u000b/\u0000K?&7Om\u001bPkb3J9\u0016W?!;Y9\u001cYv!?_(RL?\u0006\u0010\u000bj?&~R\u000e~j>\u0006Zm67D#U\\p,*J$\u001bZ{b+E>\u0000Oo-,_(\u0011\u001fL7<A(\u0016K0\u00011E+\u001cMr#*B\"\u001brz66D)46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u001f&~R\u000e~J>\u0006Zm67D#U\u001fh#-\u000b>\u001cXq':\u000b/\f\u001f8\u001a;^r'~b)\u0010Qk+8B(\u0007\u001fY-,F,\u0001\u001fv1~%6Pj.:Ej\u0001\u001fi',B+\f\u001fl7<A(\u0016K?!;Y9\u001cYv!?_(U\u0018#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u001fR\u001fh#-\u000b#\u001aK?17L#\u0010[? '\u000b,\u001bF?+-X8\u0010M1\u0016U]j6~_%\u0010\u001fi#2^(UVlb0^!\u0019dR\u0013?56B.\u001d\u001fv1~^#\u0007Z|-9E$\u000fZ{b1Ym\u001bPkb*Y8\u0006Kz&~M\"\u0007\u001fl+9E$\u001bX?\u0011\u001ff\u0001UKp);E>UYp0~_%\u001cL?\u0004;O(\u0007^k':\u000b\u0004\u0011Zq67_4Uom-(B)\u0010M";
      int var4 = "UVlb0D9UMz!1L#\u001cEz&~D?UQp6~_?\u0000Lk':\u000b,\u0006\u001f^6*N>\u0001Vq%~n#\u0001Vk;~M\"\u0007\u001fk*7Xm3Z{',J9\u0010[?\u000b:N#\u0001Vk;~{?\u001aIv&;Y\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0$6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fv1-^(\u0007\u001f|',_$\u0013V|#*NmR@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010?!Wzb\u001f_9\u0010Lk+0Lm0Qk+*Rm6Zm67M$\u0016^k'~B>UMz3+B?\u0010[3b<^9UQp6~[?\u0010Lz,*N)#&J}(;H9Uq~/;\u000b\u0004\u0011Zq67M$\u0010M?+-\u000b?\u0010Nj+,N)>6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?ULj 4N.\u0001\u001f|',_$\u0013V|#*Nm\u0006Vx,;YD!Wv1~B)\u0010Qk+*Rm\u0005Mp47O(\u0007\u001fv1~E\"\u0001\u001f|-0M$\u0012Jm':\u000b9\u001a\u001fl7.[\"\u0007K?\u0011\u001ff\u0001U\\m':N#\u0001V~.-\u0011!Wzb=N?\u0001Vy+=J9\u0010\u001f8#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u0010;^r'\u0017O(\u001bKv$7N?U\u0018@6Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U~k6;X9\u001cQxb\u001bE9\u001cKfb\u001dN?\u0001Vy+=J9\u0010\u0003R\u0005?46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u00126Pj.:Ej\u0001\u001fy+0Om\u0000Lz0?R\u001fh#-\u000b,\u001b\u001fGlk\u001btUlj 4N.\u0001q~/;\u000b/\u0000K?&7Om\u001bPkb3J9\u0016W?!;Y9\u001cYv!?_(RL?\u0006\u0010\u000bj?&~R\u000e~j>\u0006Zm67D#U\\p,*J$\u001bZ{b+E>\u0000Oo-,_(\u0011\u001fL7<A(\u0016K0\u00011E+\u001cMr#*B\"\u001brz66D)46Pj.:Ej\u0001\u001fy+0Om!Mj1*N)6Zm6~N#\u0001Mfb8D?U^l1;Y9\u001cPqb-B*\u001bZm\u001f&~R\u000e~J>\u0006Zm67D#U\u001fh#-\u000b>\u001cXq':\u000b/\f\u001f8\u001a;^r'~b)\u0010Qk+8B(\u0007\u001fY-,F,\u0001\u001fv1~%6Pj.:Ej\u0001\u001fi',B+\f\u001fl7<A(\u0016K?!;Y9\u001cYv!?_(U\u0018#6Pj.:Ej\u0001\u001f{'=D)\u0010\u001fl+9E$\u001bX?!;Y9\u001cYv!?_(\u001fR\u001fh#-\u000b#\u001aK?17L#\u0010[? '\u000b,\u001bF?+-X8\u0010M1\u0016U]j6~_%\u0010\u001fi#2^(UVlb0^!\u0019dR\u0013?56B.\u001d\u001fv1~^#\u0007Z|-9E$\u000fZ{b1Ym\u001bPkb*Y8\u0006Kz&~M\"\u0007\u001fl+9E$\u001bX?\u0011\u001ff\u0001UKp);E>UYp0~_%\u001cL?\u0004;O(\u0007^k':\u000b\u0004\u0011Zq67_4Uom-(B)\u0010M"
         .length();
      char var1 = 'Z';
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 17;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = b(var10000, b(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     b = var5;
                     a = Logger.getLogger(c.class.getName());
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "\u0004\\p,\\h\u001c$xO\u0014\u0015f\u0001w{R\u0012\\.>\u0014rH\f\u0018gH#=[\t\u0012mO\u0003oH\u0013\bl\u000b\u0014xO\u0014\\l\u0001#oD@\u001af\u001dwnH\u0002\u0016l\f#=^\u0005\u000e}\u00061t^\u0001\blO$tZ\u000e\u0019{";
                  var4 = "\u0004\\p,\\h\u001c$xO\u0014\u0015f\u0001w{R\u0012\\.>\u0014rH\f\u0018gH#=[\t\u0012mO\u0003oH\u0013\bl\u000b\u0014xO\u0014\\l\u0001#oD@\u001af\u001dwnH\u0002\u0016l\f#=^\u0005\u000e}\u00061t^\u0001\blO$tZ\u000e\u0019{"
                     .length();
                  var1 = 20;
                  var7 = -1;
            }

            var10000 = 51;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static Exception b(Exception var0) {
      return var0;
   }

   private static char[] b(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 92);
      }

      return var10000;
   }

   private static String b(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 100;
            case 1 -> 46;
            case 2 -> 14;
            case 3 -> 83;
            case 4 -> 79;
            case 5 -> 58;
            default -> 92;
         });
      }

      return new String(var10001).intern();
   }
}