package com.l7tech.server.identity.ldap;

import com.l7tech.gateway.common.audit.SystemMessages;
import com.l7tech.gateway.common.audit.Messages.M;
import com.l7tech.identity.AuthenticationException;
import com.l7tech.identity.BadCredentialsException;
import com.l7tech.identity.IdentityProviderConfig;
import com.l7tech.identity.InvalidIdProviderCfgException;
import com.l7tech.identity.ValidationException;
import com.l7tech.identity.cert.ClientCertManager.VetoSave;
import com.l7tech.identity.ldap.BindOnlyLdapIdentityProviderConfig;
import com.l7tech.identity.ldap.BindOnlyLdapUser;
import com.l7tech.objectmodel.EntityHeaderSet;
import com.l7tech.objectmodel.EntityType;
import com.l7tech.objectmodel.FindException;
import com.l7tech.objectmodel.IdentityHeader;
import com.l7tech.policy.assertion.credential.CredentialFormat;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.policy.assertion.credential.http.HttpBasic;
import com.l7tech.security.token.http.HttpBasicToken;
import com.l7tech.server.Lifecycle;
import com.l7tech.server.LifecycleException;
import com.l7tech.server.ServerConfig;
import com.l7tech.server.audit.Auditor;
import com.l7tech.server.identity.AuthenticationResult;
import com.l7tech.server.identity.ConfigurableIdentityProvider;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.HexUtils;
import java.math.BigInteger;
import java.security.cert.X509Certificate;
import java.util.logging.Logger;
import javax.security.auth.x500.X500Principal;
import org.jetbrains.annotations.Nullable;
import org.springframework.beans.BeansException;
import org.springframework.context.ApplicationContext;
import org.springframework.context.ApplicationContextAware;

@LdapClassLoaderRequired
public class BindOnlyLdapIdentityProviderImpl implements BindOnlyLdapIdentityProvider, ApplicationContextAware, ConfigurableIdentityProvider, Lifecycle {
   private static final Logger a;
   private Auditor b;
   private BindOnlyLdapIdentityProviderConfig c;
   private ServerConfig d;
   private BindOnlyLdapUserManager e;
   private BindOnlyLdapGroupManager f;
   private LdapUrlProviderImpl g;
   private static final String[] h;

   public void setApplicationContext(ApplicationContext var1) throws BeansException {
      this.b = new Auditor(this, var1, a);
   }

   @Override
   public AuthenticationResult authenticate(LoginCredentials var1) throws AuthenticationException {
      return this.authenticate(var1, false);
   }

   @Override
   public AuthenticationResult authenticate(LoginCredentials var1, boolean var2) throws AuthenticationException {
      CredentialFormat var3 = var1.getFormat();

      label23: {
         try {
            if (var3 == CredentialFormat.CLEARTEXT) {
               try {
                  return this.e.authenticatePasswordCredentials(var1);
               } catch (BindOnlyLdapUserManager.BadUsernamePatternException var6) {
                  break label23;
               }
            }
         } catch (AuthenticationException var7) {
            throw a(var7);
         }

         String var4 = h[2] + var1.getFormat();
         this.b.logAndAudit(SystemMessages.EXCEPTION_WARNING_WITH_MORE_INFO, var4);
         throw new AuthenticationException(var4);
      }

      Auditor var10000 = this.b;
      M var10001 = SystemMessages.EXCEPTION_INFO_WITH_MORE_INFO;
      String[] var10002 = new String[1];
      String[] var5 = h;
      var10002[0] = var5[3];
      var10000.logAndAudit(var10001, var10002);
      throw new BadCredentialsException(var5[8]);
   }

   public BindOnlyLdapUser findUserByCredential(LoginCredentials var1) throws FindException {
      return null;
   }

   @Override
   public X509Certificate findCertByIssuerAndSerial(X500Principal var1, BigInteger var2) throws FindException {
      return null;
   }

   @Override
   public X509Certificate findCertBySki(String var1) throws FindException {
      return null;
   }

   @Override
   public X509Certificate findCertByThumbprintSHA1(String var1) throws FindException {
      return null;
   }

   @Override
   public X509Certificate findCertBySubjectDn(X500Principal var1) throws FindException {
      return null;
   }

   @Override
   public void setIdentityProviderConfig(IdentityProviderConfig var1) throws InvalidIdProviderCfgException {
      this.c = (BindOnlyLdapIdentityProviderConfig)var1;
      this.e.configure(this);
      this.g = new LdapUrlProviderImpl(this.c, this.d);
   }

   public IdentityProviderConfig getConfig() {
      return this.c;
   }

   public BindOnlyLdapUserManager getUserManager() {
      return this.e;
   }

   public BindOnlyLdapGroupManager getGroupManager() {
      return this.f;
   }

   public EntityHeaderSet<IdentityHeader> search(EntityType[] param1, String param2) throws FindException {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: ldc com/l7tech/objectmodel/EntityType
      // 02: invokestatic java/util/EnumSet.noneOf (Ljava/lang/Class;)Ljava/util/EnumSet;
      // 05: astore 3
      // 06: aload 3
      // 07: aload 1
      // 08: invokestatic java/util/Arrays.asList ([Ljava/lang/Object;)Ljava/util/List;
      // 0b: invokevirtual java/util/EnumSet.addAll (Ljava/util/Collection;)Z
      // 0e: pop
      // 0f: new com/l7tech/objectmodel/EntityHeaderSet
      // 12: dup
      // 13: invokespecial com/l7tech/objectmodel/EntityHeaderSet.<init> ()V
      // 16: astore 4
      // 18: aload 2
      // 19: ifnull a0
      // 1c: aload 2
      // 1d: invokevirtual java/lang/String.trim ()Ljava/lang/String;
      // 20: ldc "*"
      // 22: ldc ""
      // 24: invokevirtual java/lang/String.replace (Ljava/lang/CharSequence;Ljava/lang/CharSequence;)Ljava/lang/String;
      // 27: astore 5
      // 29: aload 5
      // 2b: invokevirtual java/lang/String.length ()I
      // 2e: ifle a0
      // 31: aload 3
      // 32: getstatic com/l7tech/objectmodel/EntityType.USER Lcom/l7tech/objectmodel/EntityType;
      // 35: invokevirtual java/util/EnumSet.contains (Ljava/lang/Object;)Z
      // 38: ifeq a0
      // 3b: goto 42
      // 3e: invokestatic com/l7tech/server/identity/ldap/BindOnlyLdapIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 41: athrow
      // 42: aload 0
      // 43: getfield com/l7tech/server/identity/ldap/BindOnlyLdapIdentityProviderImpl.e Lcom/l7tech/server/identity/ldap/BindOnlyLdapUserManager;
      // 46: aload 5
      // 48: invokeinterface com/l7tech/server/identity/ldap/BindOnlyLdapUserManager.makeDn (Ljava/lang/String;)Ljava/lang/String; 2
      // 4d: pop
      // 4e: goto 73
      // 51: invokestatic com/l7tech/server/identity/ldap/BindOnlyLdapIdentityProviderImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 54: athrow
      // 55: astore 6
      // 57: new com/l7tech/objectmodel/FindException
      // 5a: dup
      // 5b: aload 6
      // 5d: invokestatic com/l7tech/util/ExceptionUtils.getMessage (Ljava/lang/Throwable;)Ljava/lang/String;
      // 60: getstatic com/l7tech/server/identity/ldap/BindOnlyLdapIdentityProviderImpl.h [Ljava/lang/String;
      // 63: astore 7
      // 65: aload 7
      // 67: bipush 0
      // 68: aaload
      // 69: swap
      // 6a: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001" ]
      // 6f: invokespecial com/l7tech/objectmodel/FindException.<init> (Ljava/lang/String;)V
      // 72: athrow
      // 73: aload 4
      // 75: new com/l7tech/objectmodel/IdentityHeader
      // 78: dup
      // 79: aload 0
      // 7a: getfield com/l7tech/server/identity/ldap/BindOnlyLdapIdentityProviderImpl.c Lcom/l7tech/identity/ldap/BindOnlyLdapIdentityProviderConfig;
      // 7d: invokevirtual com/l7tech/identity/ldap/BindOnlyLdapIdentityProviderConfig.getGoid ()Lcom/l7tech/objectmodel/Goid;
      // 80: aload 5
      // 82: getstatic com/l7tech/objectmodel/EntityType.USER Lcom/l7tech/objectmodel/EntityType;
      // 85: aload 5
      // 87: aload 5
      // 89: getstatic com/l7tech/server/identity/ldap/BindOnlyLdapIdentityProviderImpl.h [Ljava/lang/String;
      // 8c: bipush 4
      // 8d: aaload
      // 8e: swap
      // 8f: ldc "\""
      // 91: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001" ]
      // 96: aload 5
      // 98: aconst_null
      // 99: invokespecial com/l7tech/objectmodel/IdentityHeader.<init> (Lcom/l7tech/objectmodel/Goid;Ljava/lang/String;Lcom/l7tech/objectmodel/EntityType;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/Integer;)V
      // 9c: invokevirtual com/l7tech/objectmodel/EntityHeaderSet.add (Lcom/l7tech/objectmodel/EntityHeader;)Z
      // 9f: pop
      // a0: aload 4
      // a2: areturn
      // try (20 -> 27): 28 com/l7tech/server/identity/ldap/BindOnlyLdapUserManager$BadUsernamePatternException
      // try (30 -> 35): 38 com/l7tech/server/identity/ldap/BindOnlyLdapUserManager$BadUsernamePatternException
      // try (23 -> 36): 36 com/l7tech/objectmodel/FindException
   }

   @Override
   public String getLastWorkingLdapUrl() {
      return this.g.getLastWorkingLdapUrl();
   }

   @Override
   public String markCurrentUrlFailureAndGetFirstAvailableOne(@Nullable String var1) {
      return this.g.markCurrentUrlFailureAndGetFirstAvailableOne(var1);
   }

   public String getAuthRealm() {
      return HexUtils.REALM;
   }

   public void test(boolean var1, String var2, char[] var3) throws InvalidIdProviderCfgException {
      try {
         if (var1) {
            return;
         }
      } catch (BadCredentialsException var10) {
         throw a(var10);
      }

      try {
         if (var2 == null) {
            throw new InvalidIdProviderCfgException(h[6]);
         }
      } catch (BadCredentialsException var8) {
         throw a(var8);
      }

      try {
         if (var3 == null) {
            throw new InvalidIdProviderCfgException(h[10]);
         }
      } catch (BadCredentialsException var9) {
         throw a(var9);
      }

      try {
         this.getUserManager().authenticatePasswordCredentials(LoginCredentials.makeLoginCredentials(new HttpBasicToken(var2, var3), HttpBasic.class));
      } catch (BadCredentialsException var6) {
         String var10002 = ExceptionUtils.getMessage(var6);
         String[] var5 = h;
         throw new InvalidIdProviderCfgException(var5[7] + var10002, var6);
      } catch (BindOnlyLdapUserManager.BadUsernamePatternException var7) {
         throw new InvalidIdProviderCfgException(h[9] + ExceptionUtils.getMessage(var7));
      }
   }

   public void preSaveClientCert(BindOnlyLdapUser var1, X509Certificate[] var2) throws VetoSave {
      throw new VetoSave(h[5]);
   }

   public void setUserManager(BindOnlyLdapUserManager var1) {
      this.e = var1;
   }

   public void setGroupManager(BindOnlyLdapGroupManager var1) {
      this.f = var1;
   }

   public void validate(BindOnlyLdapUser var1) throws ValidationException {
      throw new ValidationException(h[1]);
   }

   public boolean hasClientCert(String var1) throws AuthenticationException {
      return false;
   }

   @Override
   public void start() throws LifecycleException {
   }

   @Override
   public void stop() throws LifecycleException {
   }

   public void setServerConfig(ServerConfig var1) {
      this.d = var1;
   }

   static {
      String[] var5 = new String[11];
      int var3 = 0;
      String var2 = "xL`\u0016~BNYM!\u0017`B\u000fYG!\u0007fR\f\rWr\u0011`\u001dN+{Cm\u001dvF\u001aDMoT|H\u001a\rQt\u0004bH\u001cYGeTtH\u001c\r@h\u001av\n\u0001CNxT^c/}SlVu\u0011\u007fW\u001a\rVnTsR\u001aEGo\u0000{D\u000fYG!\u0001aN\u0000J\u0002t\u001aaR\u001e]Ms\u0000wCNNPd\u0010wI\u001aDCmTf^\u001eH\u0002n\u001a2t\u0007@Rm\u00112k*lr!\u0004`H\u0018DFd\u0006(\u0007OxQd\u0006|F\u0003H\u0002b\u001b|S\u000fDLrTqO\u000f_Cb\u0000wU\u001d\rFh\u0007sK\u0002BUd\u00102E\u0017\rAt\u0006`B\u0000Y\u0002R\u001d\u007fW\u0002H\u0002M0SwNXQd\u0006|F\u0003H\u0002q\u0015fS\u000b_L\u0013yGl\u0004~F\u001aH\u0002t\u0007wU\u0000LOdT01kG`\u0000gU\u000b\rLn\u00002T\u001b]Rn\u0006fB\n\rDn\u00062E\u0007CF,\u001b|K\u0017\rnE5B\u0007\u001e_Mw\u001dvB\u001cIl\u0002u\u0011aSNXQd\u0006|F\u0003H\u0002l\u0001aSNOG!\u0004`H\u0018DFd\u00102N\u0000\rMs\u0010wUNYM!\u0000wT\u001a\rC!'{J\u001eAG!8Vf>\rRs\u001bdN\nHP/)yGr\u00002D\u001cHFd\u001afN\u000fAQ!\u0012sN\u0002HF!\u0000}\u0007\u000fXVi\u0011|S\u0007NCu\u0011(\u0007 NPd\u0010wI\u001aDCm\u00072C\u0007I\u0002o\u001bf\u0007\u000fXVi\u0011|S\u0007NCu\u0011";
      int var4 = "xL`\u0016~BNYM!\u0017`B\u000fYG!\u0007fR\f\rWr\u0011`\u001dN+{Cm\u001dvF\u001aDMoT|H\u001a\rQt\u0004bH\u001cYGeTtH\u001c\r@h\u001av\n\u0001CNxT^c/}SlVu\u0011\u007fW\u001a\rVnTsR\u001aEGo\u0000{D\u000fYG!\u0001aN\u0000J\u0002t\u001aaR\u001e]Ms\u0000wCNNPd\u0010wI\u001aDCmTf^\u001eH\u0002n\u001a2t\u0007@Rm\u00112k*lr!\u0004`H\u0018DFd\u0006(\u0007OxQd\u0006|F\u0003H\u0002b\u001b|S\u000fDLrTqO\u000f_Cb\u0000wU\u001d\rFh\u0007sK\u0002BUd\u00102E\u0017\rAt\u0006`B\u0000Y\u0002R\u001d\u007fW\u0002H\u0002M0SwNXQd\u0006|F\u0003H\u0002q\u0015fS\u000b_L\u0013yGl\u0004~F\u001aH\u0002t\u0007wU\u0000LOdT01kG`\u0000gU\u000b\rLn\u00002T\u001b]Rn\u0006fB\n\rDn\u00062E\u0007CF,\u001b|K\u0017\rnE5B\u0007\u001e_Mw\u001dvB\u001cIl\u0002u\u0011aSNXQd\u0006|F\u0003H\u0002l\u0001aSNOG!\u0004`H\u0018DFd\u00102N\u0000\rMs\u0010wUNYM!\u0000wT\u001a\rC!'{J\u001eAG!8Vf>\rRs\u001bdN\nHP/)yGr\u00002D\u001cHFd\u001afN\u000fAQ!\u0012sN\u0002HF!\u0000}\u0007\u000fXVi\u0011|S\u0007NCu\u0011(\u0007 NPd\u0010wI\u001aDCm\u00072C\u0007I\u0002o\u001bf\u0007\u000fXVi\u0011|S\u0007NCu\u0011"
         .length();
      char var1 = 28;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 86;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     h = var5;
                     a = Logger.getLogger(BindOnlyLdapIdentityProviderImpl.class.getName());
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "\u0016(\u001do]+s')\u000bu\t!`.>N}\u001c!m')No\u0012h`79\u0006~\u0013<h!,\u001a~GhI\u0003m\u001a~\u000e<!2,\u001dh\n's&m\u0003n\u000e<! (Nk\u000f'w+)\u000b\u007f]!ob\"\u001c\u007f\u0018:!6\"No\u0018;ub,NH\u0014%q.(NW9\tQb=\u001ct\u000b!e'?@";
                  var4 = "\u0016(\u001do]+s')\u000bu\t!`.>N}\u001c!m')No\u0012h`79\u0006~\u0013<h!,\u001a~GhI\u0003m\u001a~\u000e<!2,\u001dh\n's&m\u0003n\u000e<! (Nk\u000f'w+)\u000b\u007f]!ob\"\u001c\u007f\u0018:!6\"No\u0018;ub,NH\u0014%q.(NW9\tQb=\u001ct\u000b!e'?@"
                     .length();
                  var1 = ')';
                  var7 = -1;
            }

            var10000 = 57;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static Exception a(Exception var0) {
      return var0;
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 56);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 123;
            case 1 -> 116;
            case 2 -> 87;
            case 3 -> 34;
            case 4 -> 68;
            case 5 -> 113;
            default -> 56;
         });
      }

      return new String(var10001).intern();
   }
}