package com.l7tech.server.policy.assertion.credential;

import com.l7tech.common.http.GenericHttpClient;
import com.l7tech.common.http.GenericHttpRequestParams;
import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.message.SecurityKnob;
import com.l7tech.message.XmlKnob;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.credential.WsFederationPassiveTokenExchange;
import com.l7tech.security.token.XmlSecurityToken;
import com.l7tech.security.wsfederation.FederationPassiveClient;
import com.l7tech.security.wsfederation.InvalidHtmlException;
import com.l7tech.security.wsfederation.InvalidTokenException;
import com.l7tech.security.wsfederation.ResponseStatusException;
import com.l7tech.security.xml.processor.ProcessorResult;
import com.l7tech.server.message.PolicyContextCache;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.xml.saml.SamlAssertion;
import java.io.IOException;
import java.net.URL;
import java.util.logging.Level;
import org.springframework.context.ApplicationContext;
import org.w3c.dom.Document;
import org.w3c.dom.Element;
import org.w3c.dom.Node;

public class ServerWsFederationPassiveTokenExchange extends AbstractServerWsFederationPassiveRequestProfile<WsFederationPassiveTokenExchange> {
   private static final String j;
   private final GenericHttpClient k;
   private final URL l;
   private static final String[] o;

   public ServerWsFederationPassiveTokenExchange(WsFederationPassiveTokenExchange param1, ApplicationContext param2) {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: aload 0
      // 01: aload 1
      // 02: getstatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.j Ljava/lang/String;
      // 05: aload 2
      // 06: invokespecial com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile.<init> (Lcom/l7tech/policy/assertion/Assertion;Ljava/lang/String;Lorg/springframework/context/ApplicationContext;)V
      // 09: aload 0
      // 0a: aload 2
      // 0b: getstatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.o [Ljava/lang/String;
      // 0e: astore 4
      // 10: aload 4
      // 12: bipush 2
      // 13: aaload
      // 14: ldc com/l7tech/common/http/GenericHttpClientFactory
      // 16: invokeinterface org/springframework/context/ApplicationContext.getBean (Ljava/lang/String;Ljava/lang/Class;)Ljava/lang/Object; 3
      // 1b: checkcast com/l7tech/common/http/GenericHttpClientFactory
      // 1e: invokeinterface com/l7tech/common/http/GenericHttpClientFactory.createHttpClient ()Lcom/l7tech/common/http/GenericHttpClient; 1
      // 23: putfield com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.k Lcom/l7tech/common/http/GenericHttpClient;
      // 26: aload 1
      // 27: invokevirtual com/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange.getIpStsUrl ()Ljava/lang/String;
      // 2a: ifnull 37
      // 2d: aload 1
      // 2e: invokevirtual com/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange.getIpStsUrl ()Ljava/lang/String;
      // 31: invokevirtual java/lang/String.length ()I
      // 34: ifne 61
      // 37: aload 0
      // 38: aload 1
      // 39: invokevirtual com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.a (Lcom/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange;)Z
      // 3c: ifne 59
      // 3f: goto 46
      // 42: invokestatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 45: athrow
      // 46: aload 0
      // 47: getfield com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.logger Ljava/util/logging/Logger;
      // 4a: getstatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.o [Ljava/lang/String;
      // 4d: bipush 3
      // 4e: aaload
      // 4f: invokevirtual java/util/logging/Logger.warning (Ljava/lang/String;)V
      // 52: goto 59
      // 55: invokestatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 58: athrow
      // 59: aload 0
      // 5a: aconst_null
      // 5b: putfield com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.l Ljava/net/URL;
      // 5e: goto 8b
      // 61: aload 0
      // 62: new java/net/URL
      // 65: dup
      // 66: aload 1
      // 67: invokevirtual com/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange.getIpStsUrl ()Ljava/lang/String;
      // 6a: invokespecial java/net/URL.<init> (Ljava/lang/String;)V
      // 6d: putfield com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.l Ljava/net/URL;
      // 70: aload 0
      // 71: getfield com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.l Ljava/net/URL;
      // 74: invokevirtual java/net/URL.getQuery ()Ljava/lang/String;
      // 77: ifnull 8b
      // 7a: new java/lang/IllegalArgumentException
      // 7d: dup
      // 7e: getstatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.o [Ljava/lang/String;
      // 81: bipush 1
      // 82: aaload
      // 83: invokespecial java/lang/IllegalArgumentException.<init> (Ljava/lang/String;)V
      // 86: athrow
      // 87: invokestatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 8a: athrow
      // 8b: goto 9d
      // 8e: astore 3
      // 8f: new java/lang/IllegalArgumentException
      // 92: dup
      // 93: getstatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.o [Ljava/lang/String;
      // 96: bipush 5
      // 97: aaload
      // 98: aload 3
      // 99: invokespecial java/lang/IllegalArgumentException.<init> (Ljava/lang/String;Ljava/lang/Throwable;)V
      // 9c: athrow
      // 9d: return
      // try (44 -> 62): 62 java/net/MalformedURLException
      // try (24 -> 37): 38 java/net/MalformedURLException
      // try (20 -> 28): 29 java/net/MalformedURLException
      // try (17 -> 64): 65 java/net/MalformedURLException
   }

   @Override
   public AssertionStatus checkRequest(PolicyEnforcementContext param1) throws IOException, PolicyAssertionException {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: getstatic com/l7tech/policy/assertion/AssertionStatus.FAILED Lcom/l7tech/policy/assertion/AssertionStatus;
      // 03: astore 2
      // 04: aload 0
      // 05: getfield com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.l Ljava/net/URL;
      // 08: ifnonnull 2f
      // 0b: aload 0
      // 0c: aload 0
      // 0d: getfield com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.assertion Lcom/l7tech/policy/assertion/Assertion;
      // 10: checkcast com/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange
      // 13: invokevirtual com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.a (Lcom/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange;)Z
      // 16: ifne 2f
      // 19: goto 20
      // 1c: invokestatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 1f: athrow
      // 20: new com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$StopAndAuditException
      // 23: dup
      // 24: getstatic com/l7tech/gateway/common/audit/AssertionMessages.WSFEDPASS_CONFIG_INVALID Lcom/l7tech/gateway/common/audit/Messages$M;
      // 27: invokespecial com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$StopAndAuditException.<init> (Lcom/l7tech/gateway/common/audit/Messages$M;)V
      // 2a: athrow
      // 2b: invokestatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 2e: athrow
      // 2f: aload 0
      // 30: aload 1
      // 31: invokevirtual com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Lcom/l7tech/server/message/PolicyEnforcementContext;)Lcom/l7tech/policy/assertion/AssertionStatus;
      // 34: astore 2
      // 35: goto 4e
      // 38: astore 3
      // 39: getstatic com/l7tech/policy/assertion/AssertionStatus.AUTH_REQUIRED Lcom/l7tech/policy/assertion/AssertionStatus;
      // 3c: astore 2
      // 3d: goto 4e
      // 40: astore 3
      // 41: aload 0
      // 42: aload 3
      // 43: invokevirtual com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$StopAndAuditException.getAssertionMessage ()Lcom/l7tech/gateway/common/audit/Messages$M;
      // 46: aconst_null
      // 47: aload 3
      // 48: invokevirtual com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$StopAndAuditException.getCause ()Ljava/lang/Throwable;
      // 4b: invokevirtual com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V
      // 4e: aload 2
      // 4f: areturn
      // try (5 -> 19): 19 com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$AuthRequiredException
      // try (2 -> 11): 12 com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$AuthRequiredException
      // try (2 -> 25): 26 com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$AuthRequiredException
      // try (2 -> 25): 30 com/l7tech/server/policy/assertion/credential/AbstractServerWsFederationPassiveRequestProfile$StopAndAuditException
   }

   private boolean a(WsFederationPassiveTokenExchange param1) {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: aload 1
      // 01: invokevirtual com/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange.isAuthenticate ()Z
      // 04: ifeq 1d
      // 07: aload 1
      // 08: invokevirtual com/l7tech/policy/assertion/credential/WsFederationPassiveTokenExchange.getReplyUrl ()Ljava/lang/String;
      // 0b: ifnull 1d
      // 0e: goto 15
      // 11: invokestatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 14: athrow
      // 15: bipush 1
      // 16: goto 1e
      // 19: invokestatic com/l7tech/server/policy/assertion/credential/ServerWsFederationPassiveTokenExchange.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 1c: athrow
      // 1d: bipush 0
      // 1e: ireturn
      // try (0 -> 6): 7 java/lang/IllegalArgumentException
      // try (3 -> 11): 11 java/lang/IllegalArgumentException
   }

   private SamlAssertion a(SecurityKnob var1) throws AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException {
      SamlAssertion var2 = null;
      ProcessorResult var3 = var1.getProcessorResult();
      if (var3 != null) {
         XmlSecurityToken[] var4 = var3.getXmlSecurityTokens();

         for (XmlSecurityToken var8 : var4) {
            try {
               if (!(var8 instanceof SamlAssertion)) {
                  continue;
               }

               if (var2 != null) {
                  throw new AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException(AssertionMessages.WSFEDPASS_MULTI_TOKENS);
               }
            } catch (AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException var9) {
               throw b(var9);
            }

            var2 = (SamlAssertion)var8;
         }
      }

      return var2;
   }

   private SamlAssertion a(SamlAssertion var1) throws AbstractServerWsFederationPassiveRequestProfile.AuthRequiredException, AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException {
      try {
         GenericHttpRequestParams var3 = new GenericHttpRequestParams(this.l);
         if (FederationPassiveClient.exchangeFederationToken(this.k, var3, var1, this.assertion.getContext(), false) instanceof SamlAssertion var2) {
            return var2;
         } else {
            throw new InvalidTokenException(o[4]);
         }
      } catch (ResponseStatusException var5) {
         this.logAndAudit(AssertionMessages.WSFEDPASS_RSTR_STATUS_NON_200);
         throw new AbstractServerWsFederationPassiveRequestProfile.AuthRequiredException();
      } catch (InvalidHtmlException var6) {
         throw new AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException(
            AssertionMessages.WSFEDPASS_SERVER_HTML_INVALID, this.causeOrSelf(var6)
         );
      } catch (InvalidTokenException var7) {
         throw new AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException(AssertionMessages.WSFEDPASS_RSTR_BAD_TYPE, this.causeOrSelf(var7));
      } catch (IOException var8) {
         throw new AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException(AssertionMessages.WSFEDPASS_SERVER_HTTP_FAILED, this.causeOrSelf(var8));
      }
   }

   private void a(PolicyEnforcementContext var1, SamlAssertion var2, boolean var3) throws AbstractServerWsFederationPassiveRequestProfile.AuthRequiredException, AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException {
      this.doAuth(var1, this.k, var2, this.assertion.getReplyUrl(), this.assertion.getContext(), var3);
   }

   private void a(PolicyEnforcementContext var1, XmlKnob var2, SecurityKnob var3, SamlAssertion var4, SamlAssertion var5) throws AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException {
      try {
         Document var6 = var2.getDocumentWritable();
         Element var7 = var4.asElement();
         Node var8 = var7.getParentNode();

         try {
            var8.removeChild(var7);
            if (var8.getFirstChild() == null) {
               var8.getParentNode().removeChild(var8);
            }
         } catch (Exception var9) {
            throw b(var9);
         }

         this.updateRequestXml(var1, var2, var3, var6, var5, this.assertion);
      } catch (Exception var10) {
         throw new AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException(AssertionMessages.WSFEDPASS_DECORATION_FAILED, var10);
      }
   }

   private AssertionStatus b(PolicyEnforcementContext var1) throws AbstractServerWsFederationPassiveRequestProfile.AuthRequiredException, AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException {
      XmlKnob var2 = (XmlKnob)var1.getRequest().getKnob(XmlKnob.class);
      this.ensureXmlRequest(var2);
      SecurityKnob var3 = (SecurityKnob)var1.getRequest().getKnob(SecurityKnob.class);
      this.ensureSecurityKnob(var3);
      SamlAssertion var4 = this.a(var3);

      try {
         if (var4 == null) {
            throw new AbstractServerWsFederationPassiveRequestProfile.StopAndAuditException(AssertionMessages.WSFEDPASS_NO_SUITABLE_CREDENTIALS);
         }
      } catch (AbstractServerWsFederationPassiveRequestProfile.AuthRequiredException var10) {
         throw b(var10);
      }

      boolean var6 = true;
      SamlAssertion var5;
      if (this.l != null) {
         PolicyContextCache var7 = var1.getCache();
         var5 = (SamlAssertion)this.getCachedSecurityToken(var7);
         if (var5 == null) {
            var6 = false;
            var5 = this.a(var4);
            this.setCachedSecurityToken(var7, var5, this.getSamlAssertionExpiry(var5));
         } else {
            try {
               if (this.logger.isLoggable(Level.FINE)) {
                  this.logger.fine(o[6]);
               }
            } catch (AbstractServerWsFederationPassiveRequestProfile.AuthRequiredException var8) {
               throw b(var8);
            }
         }

         this.a(var1, var2, var3, var4, var5);
         this.addCacheInvalidator(var1);
      } else {
         var5 = var4;
      }

      try {
         if (this.assertion.isAuthenticate()) {
            this.a(var1, var5, var6);
         }
      } catch (AbstractServerWsFederationPassiveRequestProfile.AuthRequiredException var9) {
         throw b(var9);
      }

      this.addResponseAuthFailureDecorator(var1);
      return AssertionStatus.NONE;
   }

   static {
      String[] var5 = new String[7];
      int var3 = 0;
      String var2 = ",k1)\u000f\u001dKh_7\u0017Y\tWj<D+kZ\"YP\u00156o[{\u0018\u0003\u00101cGe\u0018cV\u001f\n\u0016xEJL\u0004\u0014\u0000f@gV\u0004\"\"i]mJ\t,LM\u001c\bcCy-k$7c_{N\u0014P\u00050yLpL\u0019\u000b-*@q\u0018\u001e\u000b-'OwV\u0013\u0010*eGcT\u0016WV\u0003\u00113zFpL\u0015\u0000c~Fi]\u001eD7sYg";
      int var4 = ",k1)\u000f\u001dKh_7\u0017Y\tWj<D+kZ\"YP\u00156o[{\u0018\u0003\u00101cGe\u0018cV\u001f\n\u0016xEJL\u0004\u0014\u0000f@gV\u0004\"\"i]mJ\t,LM\u001c\bcCy-k$7c_{N\u0014P\u00050yLpL\u0019\u000b-*@q\u0018\u001e\u000b-'OwV\u0013\u0010*eGcT\u0016WV\u0003\u00113zFpL\u0015\u0000c~Fi]\u001eD7sYg"
         .length();
      char var1 = 5;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 7;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = d(var10000, c(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     o = var5;
                     j = ServerWsFederationPassiveTokenExchange.class.getName() + o[0];
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "GF\u0001\u0016?\u007f\u0019fG@\u00042hJw\b)$|ImA\b5&\u001f\u001bG[\t\u001a4:ZsK\b\u00117:jSe,T2iJwZ\u0014\u001d<t";
                  var4 = "GF\u0001\u0016?\u007f\u0019fG@\u00042hJw\b)$|ImA\b5&\u001f\u001bG[\t\u001a4:ZsK\b\u00117:jSe,T2iJwZ\u0014\u001d<t".length();
                  var1 = 26;
                  var7 = -1;
            }

            var10000 = 23;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static Exception b(Exception var0) {
      return var0;
   }

   private static char[] c(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 46);
      }

      return var10000;
   }

   private static String d(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 5;
            case 1 -> 63;
            case 2 -> 119;
            case 3 -> 99;
            case 4 -> 68;
            case 5 -> 13;
            default -> 46;
         });
      }

      return new String(var10001).intern();
   }
}