package com.l7tech.server.identity.internal; import com.l7tech.common.password.PasswordHasher; import com.l7tech.gateway.common.audit.SystemMessages; import com.l7tech.identity.AuthenticationException; import com.l7tech.identity.BadCredentialsException; import com.l7tech.identity.IdentityProviderConfig; import com.l7tech.identity.InvalidIdProviderCfgException; import com.l7tech.identity.MissingCredentialsException; import com.l7tech.identity.ValidationException; import com.l7tech.identity.cert.ClientCertManager.VetoSave; import com.l7tech.identity.internal.InternalGroup; import com.l7tech.identity.internal.InternalUser; import com.l7tech.objectmodel.FindException; import com.l7tech.policy.assertion.credential.CredentialFormat; import com.l7tech.policy.assertion.credential.LoginCredentials; import com.l7tech.security.token.SshSecurityToken; import com.l7tech.server.audit.Auditor; import com.l7tech.server.event.identity.Authenticated; import com.l7tech.server.identity.AuthenticationResult; import com.l7tech.server.identity.ConfigurableIdentityProvider; import com.l7tech.server.identity.PersistentIdentityProviderImpl; import com.l7tech.server.identity.SessionAuthenticator; import com.l7tech.server.identity.cert.CertificateAuthenticator; import com.l7tech.util.ConfigFactory; import com.l7tech.util.HexUtils; import com.l7tech.util.SyspropUtil; import java.security.cert.X509Certificate; import java.util.logging.Level; import java.util.logging.Logger; import org.apache.commons.lang3.StringUtils; import org.springframework.beans.BeansException; import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContextAware; import org.springframework.transaction.annotation.Propagation; import org.springframework.transaction.annotation.Transactional; @Transactional(propagation = Propagation.SUPPORTS, rollbackFor = Throwable.class) public class InternalIdentityProviderImpl extends PersistentIdentityProviderImpl implements ApplicationContextAware, InternalIdentityProvider, ConfigurableIdentityProvider { private static final Logger a; private static final boolean b; private IdentityProviderConfig c; private InternalUserManager d; private InternalGroupManager e; private CertificateAuthenticator f; private SessionAuthenticator g; private ApplicationContext h; private Auditor i; private PasswordHasher j; private static final String[] k; public InternalUserManager getUserManager() { return this.d; } public InternalGroupManager getGroupManager() { return this.e; } @Transactional(propagation = Propagation.REQUIRED, noRollbackFor = AuthenticationException.class) @Override public AuthenticationResult authenticate(LoginCredentials var1) throws AuthenticationException { return this.authenticate(var1, false); } @Transactional(propagation = Propagation.REQUIRED, noRollbackFor = AuthenticationException.class) @Override public AuthenticationResult authenticate(LoginCredentials var1, boolean var2) throws AuthenticationException { String var3 = var1.getLogin(); InternalUser var4 = this.a(var3); try { if (var4 == null) { a.info(k[10] + var3); return null; } } catch (AuthenticationException var10) { throw a(var10); } this.a(var3, var4); CredentialFormat var5 = var1.getFormat(); AuthenticationResult var6; label54: { label53: { try { if (var5.isClientCert() || var5 == CredentialFormat.SAML) { break label53; } } catch (AuthenticationException var9) { throw a(var9); } if (var5 == CredentialFormat.SESSIONTOKEN) { var6 = this.g.authenticateSessionCredentials(var1, var4); } else { label44: { try { if (var1.getSecurityToken() != null && var1.getSecurityToken() instanceof SshSecurityToken) { break label44; } } catch (AuthenticationException var8) { throw a(var8); } var6 = this.a(var1, var4, var2); break label54; } var6 = this.a(var1, var4); } break label54; } var6 = this.f.authenticateX509Credentials(var1, var4, this.c.getCertificateValidationType(), this.i); } try { if (var6 == null) { throw new AuthenticationException(k[12] + var5); } } catch (AuthenticationException var7) { throw a(var7); } this.h.publishEvent(new Authenticated(var6)); return var6; } private InternalUser a(String var1) throws AuthenticationException { try { return (InternalUser)this.d.findByLogin(var1); } catch (FindException var4) { throw new AuthenticationException(k[28], var4); } } private void a(String var1, InternalUser var2) throws AuthenticationException { if (!var2.isEnabled()) { String[] var6 = k; String var5 = var6[18] + var1 + var6[30]; a.info(var5); this.i.logAndAudit(SystemMessages.AUTH_USER_DISABLED, var1); throw new AuthenticationException(var5); } if (this.a(var2)) { String[] var4 = k; String var3 = var4[13] + var1 + var4[14]; a.info(var3); this.i.logAndAudit(SystemMessages.AUTH_USER_EXPIRED, var1); throw new AuthenticationException(var3); } } public InternalUser findUserByCredential(LoginCredentials var1) throws FindException { InternalUser var2 = null; if (var1.getFormat() == CredentialFormat.SESSIONTOKEN) { String var3 = this.g.getUserId(var1); if (var3 != null) { var2 = (InternalUser)this.d.findByPrimaryKey(var3); } } else { String var4 = var1.getLogin(); if (var4 != null) { var2 = (InternalUser)this.d.findByLogin(var4); } } return var2; } private AuthenticationResult a(LoginCredentials var1, InternalUser var2) throws MissingCredentialsException, BadCredentialsException { SshSecurityToken var3 = (SshSecurityToken)var1.getSecurityToken(); String var4 = var3.getPublicKey(); if (StringUtils.isEmpty(var4)) { String var17 = var3.getUsername(); String[] var16 = k; String var13 = var16[20] + var17; try { if (a.isLoggable(Level.INFO)) { a.info(var13); } } catch (MissingCredentialsException var8) { throw a(var8); } throw new MissingCredentialsException(var13); } else { String var5 = var2.getProperty(InternalUser.PROPERTIES_KEY_SSH_USER_PUBLIC_KEY); if (StringUtils.isEmpty(var5)) { String var10000 = var3.getUsername(); String[] var15 = k; String var14 = var15[2] + var10000; try { if (a.isLoggable(Level.INFO)) { a.info(var14); } } catch (MissingCredentialsException var9) { throw a(var9); } throw new BadCredentialsException(var14); } else { String[] var7 = k; var5 = var5.replace(SyspropUtil.getProperty(var7[16]), ""); var5 = var5.replace("\n", ""); if (!var5.equals(var4)) { String var6 = var7[6] + var3.getUsername(); try { if (a.isLoggable(Level.INFO)) { a.info(var6); } } catch (MissingCredentialsException var10) { throw a(var10); } throw new BadCredentialsException(var6); } else { return new AuthenticationResult(var2, var1.getSecurityTokens()); } } } } private AuthenticationResult a(LoginCredentials param1, InternalUser param2, boolean param3) throws MissingCredentialsException, BadCredentialsException { // $VF: Couldn't be decompiled // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!) // java.lang.RuntimeException: parsing failure! // at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211) // at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174) // // Bytecode: // 000: aload 1 // 001: invokevirtual com/l7tech/policy/assertion/credential/LoginCredentials.getFormat ()Lcom/l7tech/policy/assertion/credential/CredentialFormat; // 004: astore 4 // 006: aload 2 // 007: invokevirtual com/l7tech/identity/internal/InternalUser.getLogin ()Ljava/lang/String; // 00a: astore 5 // 00c: aload 1 // 00d: invokevirtual com/l7tech/policy/assertion/credential/LoginCredentials.getCredentials ()[C // 010: astore 6 // 012: new com/l7tech/identity/BadCredentialsException // 015: dup // 016: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.k [Ljava/lang/String; // 019: astore 18 // 01b: aload 18 // 01d: bipush 24 // 01f: aaload // 020: invokespecial com/l7tech/identity/BadCredentialsException. (Ljava/lang/String;)V // 023: astore 7 // 025: aload 4 // 027: getstatic com/l7tech/policy/assertion/credential/CredentialFormat.CLEARTEXT Lcom/l7tech/policy/assertion/credential/CredentialFormat; // 02a: if_acmpne 25c // 02d: aload 2 // 02e: invokevirtual com/l7tech/identity/internal/InternalUser.getHashedPassword ()Ljava/lang/String; // 031: astore 8 // 033: aload 8 // 035: ifnull 052 // 038: aload 8 // 03a: invokevirtual java/lang/String.trim ()Ljava/lang/String; // 03d: invokevirtual java/lang/String.isEmpty ()Z // 040: ifne 052 // 043: goto 04a // 046: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 049: athrow // 04a: bipush 1 // 04b: goto 053 // 04e: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 051: athrow // 052: bipush 0 // 053: istore 9 // 055: bipush 0 // 056: istore 10 // 058: iload 9 // 05a: ifeq 0c3 // 05d: aload 0 // 05e: getfield com/l7tech/server/identity/internal/InternalIdentityProviderImpl.j Lcom/l7tech/common/password/PasswordHasher; // 061: aload 8 // 063: invokeinterface com/l7tech/common/password/PasswordHasher.isVerifierRecognized (Ljava/lang/String;)Z 2 // 068: ifeq 088 // 06b: aload 0 // 06c: getfield com/l7tech/server/identity/internal/InternalIdentityProviderImpl.j Lcom/l7tech/common/password/PasswordHasher; // 06f: new java/lang/String // 072: dup // 073: aload 6 // 075: invokespecial java/lang/String. ([C)V // 078: getstatic com/l7tech/util/Charsets.UTF8 Ljava/nio/charset/Charset; // 07b: invokevirtual java/lang/String.getBytes (Ljava/nio/charset/Charset;)[B // 07e: aload 8 // 080: invokeinterface com/l7tech/common/password/PasswordHasher.verifyPassword ([BLjava/lang/String;)V 3 // 085: bipush 1 // 086: istore 10 // 088: goto 08d // 08b: astore 11 // 08d: iload 10 // 08f: ifne 0c3 // 092: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a Ljava/util/logging/Logger; // 095: getstatic java/util/logging/Level.INFO Ljava/util/logging/Level; // 098: invokevirtual java/util/logging/Logger.isLoggable (Ljava/util/logging/Level;)Z // 09b: ifeq 0c0 // 09e: goto 0a5 // 0a1: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 0a4: athrow // 0a5: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a Ljava/util/logging/Logger; // 0a8: aload 5 // 0aa: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.k [Ljava/lang/String; // 0ad: bipush 8 // 0af: aaload // 0b0: swap // 0b1: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001" ] // 0b6: invokevirtual java/util/logging/Logger.info (Ljava/lang/String;)V // 0b9: goto 0c0 // 0bc: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 0bf: athrow // 0c0: aload 7 // 0c2: athrow // 0c3: aload 2 // 0c4: invokevirtual com/l7tech/identity/internal/InternalUser.getHttpDigest ()Ljava/lang/String; // 0c7: astore 11 // 0c9: aload 11 // 0cb: ifnull 0e8 // 0ce: aload 11 // 0d0: invokevirtual java/lang/String.trim ()Ljava/lang/String; // 0d3: invokevirtual java/lang/String.isEmpty ()Z // 0d6: ifne 0e8 // 0d9: goto 0e0 // 0dc: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 0df: athrow // 0e0: bipush 1 // 0e1: goto 0e9 // 0e4: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 0e7: athrow // 0e8: bipush 0 // 0e9: istore 12 // 0eb: aload 5 // 0ed: new java/lang/String // 0f0: dup // 0f1: aload 6 // 0f3: invokespecial java/lang/String. ([C)V // 0f6: getstatic com/l7tech/util/HexUtils.REALM Ljava/lang/String; // 0f9: invokestatic com/l7tech/util/HexUtils.encodePasswd (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; // 0fc: astore 13 // 0fe: iload 10 // 100: ifne 168 // 103: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.b Z // 106: ifeq 168 // 109: goto 110 // 10c: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 10f: athrow // 110: iload 12 // 112: ifeq 168 // 115: goto 11c // 118: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 11b: athrow // 11c: aload 13 // 11e: aload 11 // 120: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z // 123: ifeq 168 // 126: goto 12d // 129: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 12c: athrow // 12d: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a Ljava/util/logging/Logger; // 130: getstatic java/util/logging/Level.FINE Ljava/util/logging/Level; // 133: invokevirtual java/util/logging/Logger.isLoggable (Ljava/util/logging/Level;)Z // 136: ifeq 165 // 139: goto 140 // 13c: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 13f: athrow // 140: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a Ljava/util/logging/Logger; // 143: getstatic java/util/logging/Level.FINE Ljava/util/logging/Level; // 146: aload 2 // 147: invokevirtual com/l7tech/identity/internal/InternalUser.getLogin ()Ljava/lang/String; // 14a: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.k [Ljava/lang/String; // 14d: bipush 0 // 14e: aaload // 14f: swap // 150: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.k [Ljava/lang/String; // 153: bipush 25 // 155: aaload // 156: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001" ] // 15b: invokevirtual java/util/logging/Logger.log (Ljava/util/logging/Level;Ljava/lang/String;)V // 15e: goto 165 // 161: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 164: athrow // 165: bipush 1 // 166: istore 10 // 168: iload 10 // 16a: ifeq 21c // 16d: iload 3 // 16e: ifeq 21c // 171: goto 178 // 174: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 177: athrow // 178: aload 0 // 179: getfield com/l7tech/server/identity/internal/InternalIdentityProviderImpl.d Lcom/l7tech/server/identity/internal/InternalUserManager; // 17c: invokeinterface com/l7tech/server/identity/internal/InternalUserManager.getUserPasswordManager ()Lcom/l7tech/server/identity/internal/InternalUserPasswordManager; 1 // 181: astore 14 // 183: aload 14 // 185: aload 2 // 186: new java/lang/String // 189: dup // 18a: aload 6 // 18c: invokespecial java/lang/String. ([C)V // 18f: invokeinterface com/l7tech/server/identity/internal/InternalUserPasswordManager.configureUserPasswordHashes (Lcom/l7tech/identity/internal/InternalUser;Ljava/lang/String;)Z 3 // 194: istore 15 // 196: iload 15 // 198: ifeq 21c // 19b: new com/l7tech/identity/internal/InternalUser // 19e: dup // 19f: invokespecial com/l7tech/identity/internal/InternalUser. ()V // 1a2: astore 16 // 1a4: aload 16 // 1a6: aload 2 // 1a7: invokevirtual com/l7tech/identity/internal/InternalUser.copyFrom (Lcom/l7tech/identity/User;)V // 1aa: aload 16 // 1ac: aload 2 // 1ad: invokevirtual com/l7tech/identity/internal/InternalUser.getVersion ()I // 1b0: invokevirtual com/l7tech/identity/internal/InternalUser.setVersion (I)V // 1b3: aload 0 // 1b4: getfield com/l7tech/server/identity/internal/InternalIdentityProviderImpl.d Lcom/l7tech/server/identity/internal/InternalUserManager; // 1b7: aload 16 // 1b9: invokeinterface com/l7tech/server/identity/internal/InternalUserManager.update (Lcom/l7tech/identity/User;)V 2 // 1be: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a Ljava/util/logging/Logger; // 1c1: getstatic java/util/logging/Level.FINE Ljava/util/logging/Level; // 1c4: aload 5 // 1c6: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.k [Ljava/lang/String; // 1c9: astore 18 // 1cb: aload 18 // 1cd: bipush 27 // 1cf: aaload // 1d0: swap // 1d1: aload 18 // 1d3: bipush 21 // 1d5: aaload // 1d6: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001" ] // 1db: invokevirtual java/util/logging/Logger.log (Ljava/util/logging/Level;Ljava/lang/String;)V // 1de: goto 21c // 1e1: astore 16 // 1e3: aload 2 // 1e4: invokevirtual com/l7tech/identity/internal/InternalUser.getLogin ()Ljava/lang/String; // 1e7: aload 16 // 1e9: invokestatic com/l7tech/util/ExceptionUtils.getMessage (Ljava/lang/Throwable;)Ljava/lang/String; // 1ec: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.k [Ljava/lang/String; // 1ef: astore 18 // 1f1: aload 18 // 1f3: bipush 3 // 1f4: aaload // 1f5: dup_x2 // 1f6: pop // 1f7: aload 18 // 1f9: bipush 19 // 1fb: aaload // 1fc: swap // 1fd: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001\u0001" ] // 202: astore 17 // 204: aload 0 // 205: getfield com/l7tech/server/identity/internal/InternalIdentityProviderImpl.i Lcom/l7tech/server/audit/Auditor; // 208: getstatic com/l7tech/gateway/common/audit/AssertionMessages.EXCEPTION_WARNING_WITH_MORE_INFO Lcom/l7tech/gateway/common/audit/Messages$M; // 20b: bipush 1 // 20c: anewarray 94 // 20f: dup // 210: bipush 0 // 211: aload 17 // 213: aastore // 214: aload 16 // 216: invokestatic com/l7tech/util/ExceptionUtils.getDebugException (Ljava/lang/Throwable;)Ljava/lang/Throwable; // 219: invokevirtual com/l7tech/server/audit/Auditor.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 21c: iload 10 // 21e: ifeq 232 // 221: new com/l7tech/server/identity/AuthenticationResult // 224: dup // 225: aload 2 // 226: aload 1 // 227: invokevirtual com/l7tech/policy/assertion/credential/LoginCredentials.getSecurityTokens ()[Lcom/l7tech/security/token/SecurityToken; // 22a: invokespecial com/l7tech/server/identity/AuthenticationResult. (Lcom/l7tech/identity/User;[Lcom/l7tech/security/token/SecurityToken;)V // 22d: areturn // 22e: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 231: athrow // 232: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a Ljava/util/logging/Logger; // 235: getstatic java/util/logging/Level.INFO Ljava/util/logging/Level; // 238: invokevirtual java/util/logging/Logger.isLoggable (Ljava/util/logging/Level;)Z // 23b: ifeq 259 // 23e: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a Ljava/util/logging/Logger; // 241: aload 5 // 243: getstatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.k [Ljava/lang/String; // 246: bipush 23 // 248: aaload // 249: swap // 24a: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001" ] // 24f: invokevirtual java/util/logging/Logger.info (Ljava/lang/String;)V // 252: goto 259 // 255: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 258: athrow // 259: aload 7 // 25b: athrow // 25c: aload 4 // 25e: getstatic com/l7tech/policy/assertion/credential/CredentialFormat.DIGEST Lcom/l7tech/policy/assertion/credential/CredentialFormat; // 261: if_acmpne 26e // 264: aload 1 // 265: aload 2 // 266: invokestatic com/l7tech/server/identity/DigestAuthenticator.authenticateDigestCredentials (Lcom/l7tech/policy/assertion/credential/LoginCredentials;Lcom/l7tech/identity/User;)Lcom/l7tech/server/identity/AuthenticationResult; // 269: areturn // 26a: invokestatic com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 26d: athrow // 26e: aload 0 // 26f: aload 4 // 271: invokevirtual com/l7tech/server/identity/internal/InternalIdentityProviderImpl.a (Lcom/l7tech/policy/assertion/credential/CredentialFormat;)V // 274: aconst_null // 275: areturn // try (26 -> 35): 35 com/l7tech/common/password/IncorrectPasswordException // try (24 -> 30): 31 com/l7tech/common/password/IncorrectPasswordException // try (43 -> 60): 61 com/l7tech/common/password/IncorrectPasswordException // try (154 -> 158): 159 com/l7tech/common/password/IncorrectPasswordException // try (129 -> 149): 150 com/l7tech/common/password/IncorrectPasswordException // try (122 -> 133): 134 com/l7tech/common/password/IncorrectPasswordException // try (117 -> 126): 127 com/l7tech/common/password/IncorrectPasswordException // try (112 -> 119): 120 com/l7tech/common/password/IncorrectPasswordException // try (110 -> 114): 115 com/l7tech/common/password/IncorrectPasswordException // try (89 -> 98): 98 com/l7tech/common/password/IncorrectPasswordException // try (87 -> 93): 94 com/l7tech/common/password/IncorrectPasswordException // try (64 -> 79): 80 com/l7tech/common/password/IncorrectPasswordException // try (62 -> 68): 69 com/l7tech/common/password/IncorrectPasswordException // try (175 -> 204): 205 java/lang/Exception // try (235 -> 244): 244 com/l7tech/common/password/IncorrectPasswordException // try (246 -> 258): 259 com/l7tech/common/password/IncorrectPasswordException // try (263 -> 270): 270 com/l7tech/common/password/IncorrectPasswordException } private void a(CredentialFormat var1) { IllegalArgumentException var2 = new IllegalArgumentException(k[26] + var1.toString()); a.log(Level.WARNING, var2.toString(), var2); throw var2; } public IdentityProviderConfig getConfig() { return this.c; } public String getAuthRealm() { return HexUtils.REALM; } public void test(boolean var1, String var2, char[] var3) { } public void preSaveClientCert(InternalUser var1, X509Certificate[] var2) throws VetoSave { } public void setUserManager(InternalUserManager var1) { this.d = var1; } public void setGroupManager(InternalGroupManager var1) { this.e = var1; } public void setCertificateAuthenticator(CertificateAuthenticator var1) { this.f = var1; } @Override public void setIdentityProviderConfig(IdentityProviderConfig var1) throws InvalidIdProviderCfgException { try { this.c = var1; if (this.d == null) { throw new InvalidIdProviderCfgException(k[7]); } } catch (InvalidIdProviderCfgException var2) { throw a(var2); } try { this.d.configure(this); if (this.e != null) { this.e.configure(this); } } catch (InvalidIdProviderCfgException var3) { throw a(var3); } this.g = new SessionAuthenticator(this.c.getGoid()); } @Override public void setApplicationContext(ApplicationContext var1) throws BeansException { this.h = var1; this.i = new Auditor(this, var1, a); } public void setPasswordHasher(PasswordHasher var1) { this.j = var1; } public void validate(InternalUser var1) throws ValidationException { InternalUser var2; try { var2 = (InternalUser)this.d.findByPrimaryKey(var1.getId()); } catch (FindException var7) { String var10002 = var1.getLogin(); String[] var4 = k; throw new ValidationException(var4[11] + var10002 + var4[22], var7); } try { if (var2 == null) { throw new ValidationException(k[17] + var1.getLogin() + k[29]); } } catch (FindException var6) { throw a(var6); } try { if (!var2.isEnabled()) { throw new ValidationException(k[9] + var1.getLogin() + k[5]); } } catch (FindException var8) { throw a(var8); } try { if (this.a(var2)) { throw new ValidationException(k[9] + var1.getLogin() + k[1]); } } catch (FindException var5) { throw a(var5); } } private boolean a(InternalUser var1) { boolean var2 = false; try { if (var1.getExpiration() <= -1L || var1.getExpiration() >= System.currentTimeMillis()) { return var2; } } catch (IllegalArgumentException var3) { throw a(var3); } return true; } public boolean hasClientCert(String var1) throws AuthenticationException { try { InternalUser var2 = (InternalUser)this.d.findByLogin(var1); if (var2 == null) { return false; } X509Certificate var3 = (X509Certificate)this.clientCertManager.getUserCert(var2); return var3 != null; } catch (FindException var4) { throw new AuthenticationException(k[4], var4); } } static { String[] var5 = new String[31]; int var3 = 0; String var2 = "oO\u001e\nTfgGY\u000b\u0016Tl3[I\u000f\u0010\u0011/$\t\u001a\u000e\u000bU(}ANJ\u0014PdzJ[\u001e\u0007\u0011 vVJ\u0003\u0010Tl3OY\t\rDfg\u00075`UJ1b@3^O\b\u000eXk3E_\u0013BWgf@^J\u000b_(wON\u000b\u0000P{v\u000eH\u000f\u0001^zw\u000e\\\u0005\u0010\u0011d|IS\u0004B.mU\u001f\u000eU(}ANJ\u0017AoaO^\u000fBAi`]M\u0005\u0010U(`ZU\u0018\u0003Vm3HU\u0018B]gtGTJE!mU\u001f\u000eUf4Z\u001a\u000b\u0017E`v@N\u0003\u0001P|v\u000eY\u0018\u0007Um}ZS\u000b\u000eB%\t\u001a\u000e\u000bU(}ANJ\u0014PdzJ[\u001e\u0007\u0011 wGI\u000b\u0000]mw\u000e[\t\u0001^}}Z\u0013\u001fgT\t\rCzvMNJ\u0012Dj\u007fGYJ\tTq3HU\u0018B]gtGTJ\u0016{I\u000f\u0010|i}O]\u000f\u0010\u0011a`\u000eT\u0005\u0016\u0011{vZ\u001dgT\t\rCzvMNJ\u0012P{`YU\u0018\u0006\u0011n|\\\u001a\u0006\rVa}\u000e\u0006{I\u000f\u0010\u0011/\u001emU\u001f\u000eUf4Z\u001a\f\u000b_l3[I\u000f\u0010\u0011\u007fzZRJ\u000e^oz@\u001a\u0006{I\u000f\u0010\u0011/8oO\u001e\nTfgGY\u000b\u0016Xg}\u000eJ\u0018\rU}pK^J\f^(aKI\u001f\u000eE(uAHJ\u0001CmwKT\u001e\u000bPd3HU\u0018\u000fP|3,mH\u000f\u0006TfgG[\u0006\u0011\u0016(\u007fA]\u0003\f\u0011erZY\u0002\u0007B(r@\u001a\u0003\fEma@[\u0006BD{v\\\u001a!\u000eX\u001f\u0016\u0011|{ONJ\u0003Rk|[T\u001eBX{3@U\u001dBTpcGH\u000f\u0006\u001f7MU\u0007L]?gKY\u0002LBmaX_\u0018LXlv@N\u0003\u0016H&z@N\u000f\u0010_i\u007f\u0000[\u0006\u000e^\u007fWG]\u000f\u0011ENrBV\b\u0003Rc\u000eBS\u0004\u0007\u001f{v^[\u0018\u0003Ega\u0016g^\u000f\fEagWj\u0018\rGawKHJ7Bma\u000e,mH\u000f\u0006TfgG[\u0006\u0011\u0016(\u007fA]\u0003\f\u0011erZY\u0002\u0007B(r@\u001a\u0003\fEma@[\u0006BD{v\\\u001a\u0003\t\u0014J%`UJ1b@3^O\b\u000eXk3E_\u0013BAz|XS\u000e\u0007U(uAHJ\u000e^oz@\u001a\u0002\t\u0014\u0013\t\u001a\u000e\u000bU(}ANJ\u0014PdzJ[\u001e\u0007\u001f\u001dgT\t\rCzvMNJ\u0012P{`YU\u0018\u0006\u0011n|\\\u001a\u0006\rVa}\u000e\u0010gT\u001c\u0003]aw\u000eJ\u000b\u0011B\u007f|\\^-\t\u001a\u001f\u0011Xft\u000eR\u001e\u0016A(wG]\u000f\u0011E(pAW\u001a\u0003EaqB_J\u0012P{`YU\u0018\u0006\u0011`r]RD\u001f{T\u0019\u0017Ax|\\N\u000f\u0006\u0011kaK^\u000f\fEarB\u001a\f\rCerZ\u0000J/{J\r\u0010PlvJ\u001a\u001a\u0003B{dAH\u000eBB||\\[\r\u0007\u0011n|\\\u001a\u001f\u0011Tz3YS\u001e\n\u0011d|IS\u0004B\u0016!mU\u001f\u000eUf4Z\u001a\u000b\u0017E`v@N\u0003\u0001P|v\u000eY\u0018\u0007Um}ZS\u000b\u000eB"; int var4 = "oO\u001e\nTfgGY\u000b\u0016Tl3[I\u000f\u0010\u0011/$\t\u001a\u000e\u000bU(}ANJ\u0014PdzJ[\u001e\u0007\u0011 vVJ\u0003\u0010Tl3OY\t\rDfg\u00075`UJ1b@3^O\b\u000eXk3E_\u0013BWgf@^J\u000b_(wON\u000b\u0000P{v\u000eH\u000f\u0001^zw\u000e\\\u0005\u0010\u0011d|IS\u0004B.mU\u001f\u000eU(}ANJ\u0017AoaO^\u000fBAi`]M\u0005\u0010U(`ZU\u0018\u0003Vm3HU\u0018B]gtGTJE!mU\u001f\u000eUf4Z\u001a\u000b\u0017E`v@N\u0003\u0001P|v\u000eY\u0018\u0007Um}ZS\u000b\u000eB%\t\u001a\u000e\u000bU(}ANJ\u0014PdzJ[\u001e\u0007\u0011 wGI\u000b\u0000]mw\u000e[\t\u0001^}}Z\u0013\u001fgT\t\rCzvMNJ\u0012Dj\u007fGYJ\tTq3HU\u0018B]gtGTJ\u0016{I\u000f\u0010|i}O]\u000f\u0010\u0011a`\u000eT\u0005\u0016\u0011{vZ\u001dgT\t\rCzvMNJ\u0012P{`YU\u0018\u0006\u0011n|\\\u001a\u0006\rVa}\u000e\u0006{I\u000f\u0010\u0011/\u001emU\u001f\u000eUf4Z\u001a\f\u000b_l3[I\u000f\u0010\u0011\u007fzZRJ\u000e^oz@\u001a\u0006{I\u000f\u0010\u0011/8oO\u001e\nTfgGY\u000b\u0016Xg}\u000eJ\u0018\rU}pK^J\f^(aKI\u001f\u000eE(uAHJ\u0001CmwKT\u001e\u000bPd3HU\u0018\u000fP|3,mH\u000f\u0006TfgG[\u0006\u0011\u0016(\u007fA]\u0003\f\u0011erZY\u0002\u0007B(r@\u001a\u0003\fEma@[\u0006BD{v\\\u001a!\u000eX\u001f\u0016\u0011|{ONJ\u0003Rk|[T\u001eBX{3@U\u001dBTpcGH\u000f\u0006\u001f7MU\u0007L]?gKY\u0002LBmaX_\u0018LXlv@N\u0003\u0016H&z@N\u000f\u0010_i\u007f\u0000[\u0006\u000e^\u007fWG]\u000f\u0011ENrBV\b\u0003Rc\u000eBS\u0004\u0007\u001f{v^[\u0018\u0003Ega\u0016g^\u000f\fEagWj\u0018\rGawKHJ7Bma\u000e,mH\u000f\u0006TfgG[\u0006\u0011\u0016(\u007fA]\u0003\f\u0011erZY\u0002\u0007B(r@\u001a\u0003\fEma@[\u0006BD{v\\\u001a\u0003\t\u0014J%`UJ1b@3^O\b\u000eXk3E_\u0013BAz|XS\u000e\u0007U(uAHJ\u000e^oz@\u001a\u0002\t\u0014\u0013\t\u001a\u000e\u000bU(}ANJ\u0014PdzJ[\u001e\u0007\u001f\u001dgT\t\rCzvMNJ\u0012P{`YU\u0018\u0006\u0011n|\\\u001a\u0006\rVa}\u000e\u0010gT\u001c\u0003]aw\u000eJ\u000b\u0011B\u007f|\\^-\t\u001a\u001f\u0011Xft\u000eR\u001e\u0016A(wG]\u000f\u0011E(pAW\u001a\u0003EaqB_J\u0012P{`YU\u0018\u0006\u0011`r]RD\u001f{T\u0019\u0017Ax|\\N\u000f\u0006\u0011kaK^\u000f\fEarB\u001a\f\rCerZ\u0000J/{J\r\u0010PlvJ\u001a\u001a\u0003B{dAH\u000eBB||\\[\r\u0007\u0011n|\\\u001a\u001f\u0011Tz3YS\u001e\n\u0011d|IS\u0004B\u0016!mU\u001f\u000eUf4Z\u001a\u000b\u0017E`v@N\u0003\u0001P|v\u000eY\u0018\u0007Um}ZS\u000b\u000eB" .length(); char var1 = 20; int var7 = -1; label24: while (true) { byte var10000 = 59; String var10001 = var2.substring(++var7, var7 + var1); byte var10002 = -1; while (true) { String var8 = b(var10000, c(var10001)); switch (var10002) { case 0: var5[var3++] = var8; if ((var7 += var1) >= var4) { k = var5; a = Logger.getLogger(InternalIdentityProviderImpl.class.getName()); b = ConfigFactory.getBooleanProperty(k[15], true); return; } var1 = var2.charAt(var7); break; default: var5[var3++] = var8; if ((var7 += var1) < var4) { var1 = var2.charAt(var7); continue label24; } var2 = "I\u0013BQV);\u001c\u0013I\u000b\u001eI\u001fXQV;<\b\t\rD\u0015,;\u001c\u0013Y\u0005\u001f var2; var2++) { var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) { case 0 -> 21; case 1 -> 1; case 2 -> 81; case 3 -> 89; case 4 -> 10; case 5 -> 51; default -> 40; }); } return new String(var10001).intern(); } }