package com.l7tech.server.policy.assertion.credential.http;

import com.l7tech.common.http.HttpConstants;
import com.l7tech.common.http.prov.apache.components.HttpComponentsClient;
import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.kerberos.KerberosServiceTicket;
import com.l7tech.message.HttpRequestKnob;
import com.l7tech.message.HttpResponseKnob;
import com.l7tech.message.Message;
import com.l7tech.message.TcpKnob;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.credential.CredentialFinderException;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.policy.assertion.credential.http.HttpNegotiate;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.Pair;
import java.io.IOException;
import java.net.InetAddress;
import java.net.UnknownHostException;
import java.util.Collections;
import java.util.Map;
import java.util.logging.Level;
import java.util.logging.Logger;

public class ServerHttpNegotiate extends ServerHttpCredentialSource<HttpNegotiate> {
   private final ThreadLocal<Pair<Object, LoginCredentials>> d = new ThreadLocal<>();
   private static final String[] g;

   public ServerHttpNegotiate(HttpNegotiate var1) {
      super(var1);
   }

   @Override
   public AssertionStatus checkRequest(PolicyEnforcementContext var1) throws IOException, PolicyAssertionException {
      AssertionStatus var2 = super.checkRequest(var1);
      if (var2 == AssertionStatus.NONE) {
         LoginCredentials var3 = var1.getDefaultAuthenticationContext().getLastCredentials();

         try {
            if (var3 == null || !(var3.getPayload() instanceof KerberosServiceTicket)) {
               return var2;
            }
         } catch (IOException var6) {
            throw b(var6);
         }

         KerberosServiceTicket var4 = (KerberosServiceTicket)var3.getPayload();

         try {
            var1.setVariable(HttpNegotiate.KERBEROS_REALM, this.b(var4.getClientPrincipalName()));
            if (null != var4.getEncData()) {
               var1.setVariable(HttpNegotiate.KERBEROS_DATA, var4.getEncData());
            }
         } catch (IOException var5) {
            throw b(var5);
         }
      }

      return var2;
   }

   @Override
   protected Map<String, String> challengeParams(Message var1, Map<String, String> var2) {
      return Collections.emptyMap();
   }

   @Override
   protected String scheme() {
      return HttpComponentsClient.NEGOTIATE_SCHEME;
   }

   @Override
   protected LoginCredentials findCredentials(Message var1, Map<String, String> var2) throws IOException, CredentialFinderException {
      HttpRequestKnob var3 = var1.getHttpRequestKnob();
      String var4 = var3.getHeaderSingleValue(HttpConstants.HEADER_AUTHORIZATION);
      Object var5 = var3.getConnectionIdentifier();
      return this.a(var1, var4, var5, var2);
   }

   @Override
   protected String realm() {
      return "";
   }

   @Override
   protected AssertionStatus checkAuthParams(Map var1) {
      return AssertionStatus.NONE;
   }

   private LoginCredentials a(Message param1, String param2, Object param3, Map<String, String> param4) throws IOException {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 000: aload 2
      // 001: ifnull 012
      // 004: aload 2
      // 005: invokevirtual java/lang/String.length ()I
      // 008: ifne 036
      // 00b: goto 012
      // 00e: invokestatic com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 011: athrow
      // 012: aload 0
      // 013: aload 3
      // 014: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.a (Ljava/lang/Object;)Lcom/l7tech/policy/assertion/credential/LoginCredentials;
      // 017: astore 5
      // 019: aload 5
      // 01b: ifnull 02c
      // 01e: aload 0
      // 01f: getstatic com/l7tech/gateway/common/audit/AssertionMessages.HTTPNEGOTIATE_USING_CONN_CREDS Lcom/l7tech/gateway/common/audit/Messages$M;
      // 022: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;)V
      // 025: goto 033
      // 028: invokestatic com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 02b: athrow
      // 02c: aload 0
      // 02d: getstatic com/l7tech/gateway/common/audit/AssertionMessages.HTTPCREDS_NO_AUTHN_HEADER Lcom/l7tech/gateway/common/audit/Messages$M;
      // 030: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;)V
      // 033: aload 5
      // 035: areturn
      // 036: aload 2
      // 037: ldc " "
      // 039: invokevirtual java/lang/String.indexOf (Ljava/lang/String;)I
      // 03c: istore 5
      // 03e: iload 5
      // 040: ifge 050
      // 043: aload 0
      // 044: getstatic com/l7tech/gateway/common/audit/AssertionMessages.HTTPCREDS_NA_AUTHN_HEADER Lcom/l7tech/gateway/common/audit/Messages$M;
      // 047: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;)V
      // 04a: aconst_null
      // 04b: areturn
      // 04c: invokestatic com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 04f: athrow
      // 050: aload 2
      // 051: bipush 0
      // 052: iload 5
      // 054: invokevirtual java/lang/String.substring (II)Ljava/lang/String;
      // 057: astore 6
      // 059: aload 2
      // 05a: iload 5
      // 05c: bipush 1
      // 05d: iadd
      // 05e: invokevirtual java/lang/String.substring (I)Ljava/lang/String;
      // 061: astore 7
      // 063: aload 7
      // 065: bipush 1
      // 066: invokestatic com/l7tech/util/HexUtils.decodeBase64 (Ljava/lang/String;Z)[B
      // 069: astore 8
      // 06b: aload 0
      // 06c: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.scheme ()Ljava/lang/String;
      // 06f: aload 6
      // 071: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 074: ifeq 084
      // 077: aload 8
      // 079: arraylength
      // 07a: ifne 0ba
      // 07d: goto 084
      // 080: invokestatic com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 083: athrow
      // 084: aload 0
      // 085: getstatic com/l7tech/gateway/common/audit/AssertionMessages.HTTPCREDS_NA_AUTHN_HEADER Lcom/l7tech/gateway/common/audit/Messages$M;
      // 088: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;)V
      // 08b: aload 6
      // 08d: getstatic com/l7tech/common/http/prov/apache/components/HttpComponentsClient.NTLM_SCHEME Ljava/lang/String;
      // 090: invokevirtual java/lang/String.equals (Ljava/lang/Object;)Z
      // 093: ifeq 0b8
      // 096: goto 09d
      // 099: invokestatic com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 09c: athrow
      // 09d: aload 4
      // 09f: getstatic com/l7tech/common/http/prov/apache/components/HttpComponentsClient.NTLM_SCHEME Ljava/lang/String;
      // 0a2: aload 7
      // 0a4: invokeinterface java/util/Map.put (Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object; 3
      // 0a9: pop
      // 0aa: aload 0
      // 0ab: getstatic com/l7tech/gateway/common/audit/AssertionMessages.HTTPNEGOTIATE_NTLM_AUTH Lcom/l7tech/gateway/common/audit/Messages$M;
      // 0ae: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;)V
      // 0b1: goto 0b8
      // 0b4: invokestatic com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 0b7: athrow
      // 0b8: aconst_null
      // 0b9: areturn
      // 0ba: aload 8
      // 0bc: bipush 0
      // 0bd: bipush 1
      // 0be: getstatic com/l7tech/common/http/prov/apache/components/HttpComponentsClient.NTLM_MESSAGE_PREFIX [B
      // 0c1: bipush 0
      // 0c2: invokestatic com/l7tech/util/ArrayUtils.matchSubarrayOrPrefix ([BII[BI)I
      // 0c5: bipush -1
      // 0c6: if_icmple 0e3
      // 0c9: aload 4
      // 0cb: getstatic com/l7tech/common/http/prov/apache/components/HttpComponentsClient.NTLM_SCHEME Ljava/lang/String;
      // 0ce: aload 7
      // 0d0: invokeinterface java/util/Map.put (Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object; 3
      // 0d5: pop
      // 0d6: aload 0
      // 0d7: getstatic com/l7tech/gateway/common/audit/AssertionMessages.HTTPNEGOTIATE_NTLM_AUTH Lcom/l7tech/gateway/common/audit/Messages$M;
      // 0da: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;)V
      // 0dd: aconst_null
      // 0de: areturn
      // 0df: invokestatic com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.b (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 0e2: athrow
      // 0e3: new com/l7tech/kerberos/KerberosGSSAPReqTicket
      // 0e6: dup
      // 0e7: aload 8
      // 0e9: invokespecial com/l7tech/kerberos/KerberosGSSAPReqTicket.<init> ([B)V
      // 0ec: astore 9
      // 0ee: new com/l7tech/kerberos/KerberosClient
      // 0f1: dup
      // 0f2: invokespecial com/l7tech/kerberos/KerberosClient.<init> ()V
      // 0f5: astore 10
      // 0f7: aload 1
      // 0f8: invokevirtual com/l7tech/message/Message.getHttpRequestKnob ()Lcom/l7tech/message/HttpRequestKnob;
      // 0fb: invokeinterface com/l7tech/message/HttpRequestKnob.getRequestURL ()Ljava/net/URL; 1
      // 100: invokevirtual java/net/URL.getProtocol ()Ljava/lang/String;
      // 103: aload 1
      // 104: invokevirtual com/l7tech/message/Message.getHttpRequestKnob ()Lcom/l7tech/message/HttpRequestKnob;
      // 107: invokeinterface com/l7tech/message/HttpRequestKnob.getRequestURL ()Ljava/net/URL; 1
      // 10c: invokevirtual java/net/URL.getHost ()Ljava/lang/String;
      // 10f: bipush 0
      // 110: invokestatic com/l7tech/kerberos/KerberosClient.getKerberosAcceptPrincipal (Ljava/lang/String;Ljava/lang/String;Z)Ljava/lang/String;
      // 113: astore 11
      // 115: goto 11f
      // 118: astore 12
      // 11a: invokestatic com/l7tech/kerberos/KerberosClient.getGSSServiceName ()Ljava/lang/String;
      // 11d: astore 11
      // 11f: aload 10
      // 121: aload 11
      // 123: aload 0
      // 124: aload 1
      // 125: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.a (Lcom/l7tech/message/Message;)Ljava/net/InetAddress;
      // 128: aload 9
      // 12a: invokevirtual com/l7tech/kerberos/KerberosClient.getKerberosServiceTicket (Ljava/lang/String;Ljava/net/InetAddress;Lcom/l7tech/kerberos/KerberosGSSAPReqTicket;)Lcom/l7tech/kerberos/KerberosServiceTicket;
      // 12d: astore 12
      // 12f: new com/l7tech/security/token/http/HttpNegotiateToken
      // 132: dup
      // 133: aload 12
      // 135: invokespecial com/l7tech/security/token/http/HttpNegotiateToken.<init> (Lcom/l7tech/kerberos/KerberosServiceTicket;)V
      // 138: aload 0
      // 139: getfield com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.assertion Lcom/l7tech/policy/assertion/Assertion;
      // 13c: checkcast com/l7tech/policy/assertion/credential/http/HttpNegotiate
      // 13f: invokevirtual java/lang/Object.getClass ()Ljava/lang/Class;
      // 142: invokestatic com/l7tech/policy/assertion/credential/LoginCredentials.makeLoginCredentials (Lcom/l7tech/security/token/SecurityToken;Ljava/lang/Class;)Lcom/l7tech/policy/assertion/credential/LoginCredentials;
      // 145: astore 13
      // 147: aload 0
      // 148: aload 3
      // 149: aload 13
      // 14b: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.a (Ljava/lang/Object;Lcom/l7tech/policy/assertion/credential/LoginCredentials;)V
      // 14e: aload 13
      // 150: areturn
      // 151: astore 10
      // 153: aload 0
      // 154: getstatic com/l7tech/gateway/common/audit/AssertionMessages.HTTPNEGOTIATE_WARNING Lcom/l7tech/gateway/common/audit/Messages$M;
      // 157: bipush 1
      // 158: anewarray 246
      // 15b: dup
      // 15c: bipush 0
      // 15d: aload 10
      // 15f: invokevirtual com/l7tech/kerberos/KerberosException.getMessage ()Ljava/lang/String;
      // 162: aastore
      // 163: aload 10
      // 165: invokestatic com/l7tech/util/ExceptionUtils.getDebugException (Ljava/lang/Throwable;)Ljava/lang/Throwable;
      // 168: invokevirtual com/l7tech/server/policy/assertion/credential/http/ServerHttpNegotiate.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V
      // 16b: aconst_null
      // 16c: areturn
      // try (87 -> 105): 105 com/l7tech/kerberos/KerberosException
      // try (64 -> 82): 83 com/l7tech/kerberos/KerberosException
      // try (58 -> 71): 72 com/l7tech/kerberos/KerberosException
      // try (53 -> 61): 62 com/l7tech/kerberos/KerberosException
      // try (29 -> 36): 36 com/l7tech/kerberos/KerberosException
      // try (12 -> 18): 18 com/l7tech/kerberos/KerberosException
      // try (0 -> 5): 6 com/l7tech/kerberos/KerberosException
      // try (116 -> 127): 128 com/l7tech/kerberos/KerberosException
      // try (112 -> 154): 155 com/l7tech/kerberos/KerberosException
   }

   @Override
   protected void challenge(PolicyEnforcementContext var1, Map<String, String> var2) {
      if (!var2.containsKey(HttpComponentsClient.NTLM_SCHEME)) {
         StringBuilder var3 = new StringBuilder();
         String var4 = this.scheme();
         if (var2.containsKey(var4)) {
            var3.append(var4);
            var3.append(" ");
            var3.append((String)var2.get(var4));
         } else {
            var3.append(var4);
         }

         String var5 = var3.toString();
         if (var5.length() > 0) {
            this.logAndAudit(AssertionMessages.HTTPCREDS_CHALLENGING, var5);
            HttpResponseKnob var6 = var1.getResponse().getHttpResponseKnob();
            var6.addChallenge(var5);
         }
      }
   }

   private void a(Object var1, LoginCredentials var2) {
      this.d.set(new Pair(var1, var2));
   }

   private LoginCredentials a(Object var1) {
      LoginCredentials var2 = null;
      Pair var3 = this.d.get();
      if (var3 != null) {
         if (var3.left.equals(var1)) {
            var2 = (LoginCredentials)var3.right;
         } else {
            this.d.set(null);
         }
      }

      return var2;
   }

   private String b(String var1) {
      String var2 = "";
      int var3 = var1.lastIndexOf("@");
      if (var3 > -1) {
         var2 = var1.substring(var3 + 1);
      }

      return var2;
   }

   private InetAddress a(Message var1) {
      InetAddress var2 = null;
      TcpKnob var3 = (TcpKnob)var1.getKnob(TcpKnob.class);
      if (var3 != null) {
         try {
            var2 = InetAddress.getByName(var3.getRemoteAddress());
         } catch (UnknownHostException var6) {
            Logger var10000 = this.logger;
            Level var10001 = Level.INFO;
            String var10002 = var3.getRemoteAddress();
            String[] var5 = g;
            var10000.log(var10001, var5[1] + var10002 + var5[0], ExceptionUtils.getDebugException(var6));
         }
      }

      return var2;
   }

   private static Exception b(Exception var0) {
      return var0;
   }

   static {
      String[] var5 = new String[2];
      int var3 = 0;
      String var2 = "K0(/q\u007fnw\u0013C\u0003j*aaVL\u0018{*cwW_\tmy\"u\\_Lloo|GHLWZ\"4";
      int var4 = "K0(/q\u007fnw\u0013C\u0003j*aaVL\u0018{*cwW_\tmy\"u\\_Lloo|GHLWZ\"4".length();
      char var1 = 2;
      int var0 = -1;

      while (true) {
         String var10002 = d(119, f(var2.substring(++var0, var0 + var1)));
         byte var10001 = -1;
         var5[var3++] = var10002;
         if ((var0 += var1) >= var4) {
            g = var5;
            return;
         }

         var1 = var2.charAt(var0);
      }
   }

   private static char[] f(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 90);
      }

      return var10000;
   }

   private static String d(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 27;
            case 1 -> 105;
            case 2 -> 125;
            case 3 -> 117;
            case 4 -> 100;
            case 5 -> 68;
            default -> 90;
         });
      }

      return new String(var10001).intern();
   }
}