package com.l7tech.server.policy.assertion.xmlsec; import com.l7tech.gateway.common.audit.AssertionMessages; import com.l7tech.message.Message; import com.l7tech.policy.assertion.Assertion; import com.l7tech.policy.assertion.AssertionStatus; import com.l7tech.policy.assertion.PolicyAssertionException; import com.l7tech.policy.assertion.xmlsec.AddWssSecurityToken; import com.l7tech.policy.assertion.xmlsec.XmlSecurityRecipientContext; import com.l7tech.policy.variable.Syntax; import com.l7tech.security.token.SecurityTokenType; import com.l7tech.security.xml.SecurityTokenResolver; import com.l7tech.security.xml.decorator.DecorationRequirements; import com.l7tech.security.xml.decorator.DecorationRequirements.PreferredSigningTokenType; import com.l7tech.server.message.AuthenticationContext; import com.l7tech.server.message.PolicyEnforcementContext; import com.l7tech.server.policy.assertion.AbstractMessageTargetableServerAssertion; import com.l7tech.server.policy.variable.ExpandVariables; import com.l7tech.server.secureconversation.SecureConversationSession; import java.io.IOException; import java.util.Map; import org.springframework.beans.factory.BeanFactory; public class ServerAddWssSecurityToken extends AbstractMessageTargetableServerAssertion { private final String[] d; private final AddWssSignatureSupport e; private final AddWssEncryptionSupport f; private final SecurityTokenResolver g; private static final String[] h; public ServerAddWssSecurityToken(AddWssSecurityToken var1, BeanFactory var2) { super(var1); this.d = var1.getVariablesUsed(); this.f = new AddWssEncryptionSupport(this.getAuditHaver(), this.logger, var1, var1, var1); this.e = new AddWssSignatureSupport(this.getAuditHaver(), var1, var2, a(var1), Assertion.isResponse(var1)); this.g = var2 == null ? null : (SecurityTokenResolver)var2.getBean(h[4], SecurityTokenResolver.class); } @Override protected AssertionStatus doCheckRequest(PolicyEnforcementContext var1, Message var2, String var3, AuthenticationContext var4) throws IOException, PolicyAssertionException { DecorationRequirements var5 = var2.getSecurityKnob().getAlternateDecorationRequirements(this.assertion.getRecipientContext()); var5.setProtectTokens(this.assertion.isProtectTokens()); SecurityTokenType var6 = this.assertion.getTokenType(); try { if (SecurityTokenType.WSS_USERNAME == var6) { return this.d(var1, var2, var3, var4, var5); } } catch (IOException var8) { throw a(var8); } try { if (SecurityTokenType.WSSC_CONTEXT == var6) { return this.c(var1, var2, var3, var4, var5); } } catch (IOException var10) { throw a(var10); } try { if (SecurityTokenType.SAML_ASSERTION == var6) { return this.b(var1, var2, var3, var4, var5); } } catch (IOException var7) { throw a(var7); } try { if (SecurityTokenType.WSS_ENCRYPTEDKEY == var6) { return this.a(var1, var2, var3, var4, var5); } } catch (IOException var9) { throw a(var9); } this.logAndAudit(AssertionMessages.ADD_WSS_TOKEN_UNSUPPORTED_TYPE, this.assertion.getTokenType().getName()); return AssertionStatus.SERVER_ERROR; } private static boolean a(AddWssSecurityToken var0) { return SecurityTokenType.WSS_USERNAME == var0.getTokenType(); } private AssertionStatus a(PolicyEnforcementContext var1, Message var2, String var3, AuthenticationContext var4, DecorationRequirements var5) throws IOException, PolicyAssertionException { var5.setPreferredSigningTokenType(PreferredSigningTokenType.ENCRYPTED_KEY); var5.setIncludeTimestamp(true); var5.setSignTimestamp(true); try { AddWssEncryptionContext var6 = this.f.buildEncryptionContext(var1); this.f.applyDecorationRequirements(var1, var5, var6, null); } catch (AddWssEncryptionSupport.MultipleTokensException var7) { this.logAndAudit(AssertionMessages.ADD_WSS_TOKEN_MULTIPLE_REQ_TOKENS); } return AssertionStatus.NONE; } private AssertionStatus b(PolicyEnforcementContext param1, Message param2, String param3, AuthenticationContext param4, DecorationRequirements param5) { // $VF: Couldn't be decompiled // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!) // java.lang.RuntimeException: parsing failure! // at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211) // at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174) // // Bytecode: // 000: aload 0 // 001: getfield com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.assertion Lcom/l7tech/policy/assertion/Assertion; // 004: checkcast com/l7tech/policy/assertion/xmlsec/AddWssSecurityToken // 007: invokevirtual com/l7tech/policy/assertion/xmlsec/AddWssSecurityToken.getSamlAssertionVariable ()Ljava/lang/String; // 00a: astore 6 // 00c: aload 6 // 00e: ifnull 021 // 011: aload 6 // 013: invokevirtual java/lang/String.length ()I // 016: bipush 1 // 017: if_icmpge 03c // 01a: goto 021 // 01d: invokestatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 020: athrow // 021: aload 0 // 022: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ASSERTION_MISCONFIGURED Lcom/l7tech/gateway/common/audit/Messages$M; // 025: bipush 1 // 026: anewarray 46 // 029: dup // 02a: bipush 0 // 02b: getstatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.h [Ljava/lang/String; // 02e: bipush 0 // 02f: aaload // 030: aastore // 031: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;)V // 034: getstatic com/l7tech/policy/assertion/AssertionStatus.SERVER_ERROR Lcom/l7tech/policy/assertion/AssertionStatus; // 037: areturn // 038: invokestatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 03b: athrow // 03c: aload 1 // 03d: aload 0 // 03e: getfield com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.d [Ljava/lang/String; // 041: aload 0 // 042: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.getAudit ()Lcom/l7tech/gateway/common/audit/Audit; // 045: invokeinterface com/l7tech/server/message/PolicyEnforcementContext.getVariableMap ([Ljava/lang/String;Lcom/l7tech/gateway/common/audit/Audit;)Ljava/util/Map; 3 // 04a: astore 8 // 04c: aload 6 // 04e: invokestatic com/l7tech/policy/variable/Syntax.getVariableExpression (Ljava/lang/String;)Ljava/lang/String; // 051: aload 8 // 053: aload 0 // 054: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.getAudit ()Lcom/l7tech/gateway/common/audit/Audit; // 057: invokestatic com/l7tech/server/policy/variable/ExpandVariables.processSingleVariableAsObject (Ljava/lang/String;Ljava/util/Map;Lcom/l7tech/gateway/common/audit/Audit;)Ljava/lang/Object; // 05a: astore 9 // 05c: aconst_null // 05d: aload 9 // 05f: if_acmpne 07d // 062: aload 0 // 063: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_NOT_SAML Lcom/l7tech/gateway/common/audit/Messages$M; // 066: bipush 1 // 067: anewarray 46 // 06a: dup // 06b: bipush 0 // 06c: getstatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.h [Ljava/lang/String; // 06f: astore 12 // 071: aload 12 // 073: bipush 2 // 074: aaload // 075: aastore // 076: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;)V // 079: getstatic com/l7tech/policy/assertion/AssertionStatus.SERVER_ERROR Lcom/l7tech/policy/assertion/AssertionStatus; // 07c: areturn // 07d: aload 9 // 07f: instanceof [Ljava/lang/Object; // 082: ifeq 09c // 085: aload 9 // 087: checkcast [Ljava/lang/Object; // 08a: astore 10 // 08c: aload 10 // 08e: arraylength // 08f: bipush 1 // 090: if_icmpne 099 // 093: aload 10 // 095: bipush 0 // 096: aaload // 097: astore 9 // 099: goto 0c4 // 09c: aload 9 // 09e: instanceof java/util/Collection // 0a1: ifeq 0c4 // 0a4: aload 9 // 0a6: checkcast java/util/Collection // 0a9: astore 10 // 0ab: aload 10 // 0ad: invokeinterface java/util/Collection.size ()I 1 // 0b2: bipush 1 // 0b3: if_icmpne 0c4 // 0b6: aload 10 // 0b8: invokeinterface java/util/Collection.iterator ()Ljava/util/Iterator; 1 // 0bd: invokeinterface java/util/Iterator.next ()Ljava/lang/Object; 1 // 0c2: astore 9 // 0c4: aload 9 // 0c6: instanceof org/w3c/dom/Element // 0c9: ifeq 0d6 // 0cc: aload 9 // 0ce: checkcast org/w3c/dom/Element // 0d1: astore 7 // 0d3: goto 134 // 0d6: aload 9 // 0d8: instanceof org/w3c/dom/Document // 0db: ifeq 0ed // 0de: aload 9 // 0e0: checkcast org/w3c/dom/Document // 0e3: invokeinterface org/w3c/dom/Document.getDocumentElement ()Lorg/w3c/dom/Element; 1 // 0e8: astore 7 // 0ea: goto 134 // 0ed: aload 9 // 0ef: instanceof java/lang/CharSequence // 0f2: ifeq 10b // 0f5: aload 9 // 0f7: invokevirtual java/lang/Object.toString ()Ljava/lang/String; // 0fa: astore 10 // 0fc: aload 10 // 0fe: invokestatic com/l7tech/common/io/XmlUtil.stringToDocument (Ljava/lang/String;)Lorg/w3c/dom/Document; // 101: invokeinterface org/w3c/dom/Document.getDocumentElement ()Lorg/w3c/dom/Element; 1 // 106: astore 7 // 108: goto 134 // 10b: aload 0 // 10c: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_NOT_SAML Lcom/l7tech/gateway/common/audit/Messages$M; // 10f: bipush 1 // 110: anewarray 46 // 113: dup // 114: bipush 0 // 115: aload 9 // 117: invokevirtual java/lang/Object.getClass ()Ljava/lang/Class; // 11a: invokevirtual java/lang/Class.getName ()Ljava/lang/String; // 11d: getstatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.h [Ljava/lang/String; // 120: astore 12 // 122: aload 12 // 124: bipush 3 // 125: aaload // 126: swap // 127: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001" ] // 12c: aastore // 12d: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;)V // 130: getstatic com/l7tech/policy/assertion/AssertionStatus.SERVER_ERROR Lcom/l7tech/policy/assertion/AssertionStatus; // 133: areturn // 134: goto 155 // 137: astore 8 // 139: aload 0 // 13a: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_NOT_SAML Lcom/l7tech/gateway/common/audit/Messages$M; // 13d: bipush 1 // 13e: anewarray 46 // 141: dup // 142: bipush 0 // 143: aload 8 // 145: invokestatic com/l7tech/util/ExceptionUtils.getMessage (Ljava/lang/Throwable;)Ljava/lang/String; // 148: aastore // 149: aload 8 // 14b: invokestatic com/l7tech/util/ExceptionUtils.getDebugException (Ljava/lang/Throwable;)Ljava/lang/Throwable; // 14e: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 151: getstatic com/l7tech/policy/assertion/AssertionStatus.SERVER_ERROR Lcom/l7tech/policy/assertion/AssertionStatus; // 154: areturn // 155: aload 7 // 157: aload 0 // 158: getfield com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.g Lcom/l7tech/security/xml/SecurityTokenResolver; // 15b: invokestatic com/l7tech/xml/saml/SamlAssertion.newInstance (Lorg/w3c/dom/Element;Lcom/l7tech/security/xml/SecurityTokenResolver;)Lcom/l7tech/xml/saml/SamlAssertion; // 15e: astore 8 // 160: goto 181 // 163: astore 9 // 165: aload 0 // 166: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_NOT_SAML Lcom/l7tech/gateway/common/audit/Messages$M; // 169: bipush 1 // 16a: anewarray 46 // 16d: dup // 16e: bipush 0 // 16f: aload 9 // 171: invokestatic com/l7tech/util/ExceptionUtils.getMessage (Ljava/lang/Throwable;)Ljava/lang/String; // 174: aastore // 175: aload 9 // 177: invokestatic com/l7tech/util/ExceptionUtils.getDebugException (Ljava/lang/Throwable;)Ljava/lang/Throwable; // 17a: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 17d: getstatic com/l7tech/policy/assertion/AssertionStatus.SERVER_ERROR Lcom/l7tech/policy/assertion/AssertionStatus; // 180: areturn // 181: aload 5 // 183: aload 8 // 185: aload 0 // 186: getfield com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.assertion Lcom/l7tech/policy/assertion/Assertion; // 189: checkcast com/l7tech/policy/assertion/xmlsec/AddWssSecurityToken // 18c: invokevirtual com/l7tech/policy/assertion/xmlsec/AddWssSecurityToken.isProtectTokens ()Z // 18f: invokevirtual com/l7tech/security/xml/decorator/DecorationRequirements.setSenderSamlToken (Lcom/l7tech/xml/saml/SamlAssertion;Z)V // 192: aload 5 // 194: aload 0 // 195: getfield com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.e Lcom/l7tech/server/policy/assertion/xmlsec/AddWssSignatureSupport; // 198: invokevirtual com/l7tech/server/policy/assertion/xmlsec/AddWssSignatureSupport.getSignerInfo ()Lcom/l7tech/security/xml/SignerInfo; // 19b: invokevirtual com/l7tech/security/xml/SignerInfo.getPrivate ()Ljava/security/PrivateKey; // 19e: invokevirtual com/l7tech/security/xml/decorator/DecorationRequirements.setSenderMessageSigningPrivateKey (Ljava/security/PrivateKey;)V // 1a1: goto 1cd // 1a4: astore 9 // 1a6: aload 0 // 1a7: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ASSERTION_MISCONFIGURED Lcom/l7tech/gateway/common/audit/Messages$M; // 1aa: bipush 1 // 1ab: anewarray 46 // 1ae: dup // 1af: bipush 0 // 1b0: aload 9 // 1b2: invokestatic com/l7tech/util/ExceptionUtils.getMessage (Ljava/lang/Throwable;)Ljava/lang/String; // 1b5: getstatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.h [Ljava/lang/String; // 1b8: bipush 5 // 1b9: aaload // 1ba: swap // 1bb: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001" ] // 1c0: aastore // 1c1: aload 9 // 1c3: invokestatic com/l7tech/util/ExceptionUtils.getDebugException (Ljava/lang/Throwable;)Ljava/lang/Throwable; // 1c6: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 1c9: getstatic com/l7tech/policy/assertion/AssertionStatus.SERVER_ERROR Lcom/l7tech/policy/assertion/AssertionStatus; // 1cc: areturn // 1cd: aload 8 // 1cf: invokevirtual com/l7tech/xml/saml/SamlAssertion.isHolderOfKey ()Z // 1d2: ifeq 1e4 // 1d5: aload 5 // 1d7: getstatic com/l7tech/security/xml/decorator/DecorationRequirements$PreferredSigningTokenType.SAML_HOK Lcom/l7tech/security/xml/decorator/DecorationRequirements$PreferredSigningTokenType; // 1da: invokevirtual com/l7tech/security/xml/decorator/DecorationRequirements.setPreferredSigningTokenType (Lcom/l7tech/security/xml/decorator/DecorationRequirements$PreferredSigningTokenType;)V // 1dd: goto 1e4 // 1e0: invokestatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 1e3: athrow // 1e4: aload 8 // 1e6: invokevirtual com/l7tech/xml/saml/SamlAssertion.hasSubjectConfirmationEncryptedKey ()Z // 1e9: ifeq 28b // 1ec: aconst_null // 1ed: astore 9 // 1ef: aload 8 // 1f1: aload 0 // 1f2: getfield com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.g Lcom/l7tech/security/xml/SecurityTokenResolver; // 1f5: invokevirtual com/l7tech/xml/saml/SamlAssertion.getSubjectConfirmationEncryptedKey (Lcom/l7tech/security/xml/SecurityTokenResolver;)Lcom/l7tech/security/token/EncryptedKey; // 1f8: astore 9 // 1fa: goto 230 // 1fd: astore 10 // 1ff: aload 0 // 200: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_SAML_SECRET_KEY_UNAVAILABLE Lcom/l7tech/gateway/common/audit/Messages$M; // 203: aconst_null // 204: aload 10 // 206: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 209: goto 230 // 20c: astore 10 // 20e: aload 0 // 20f: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_SAML_SECRET_KEY_UNAVAILABLE_WITH_MORE_INFO Lcom/l7tech/gateway/common/audit/Messages$M; // 212: bipush 1 // 213: anewarray 46 // 216: dup // 217: bipush 0 // 218: aload 10 // 21a: invokestatic com/l7tech/util/ExceptionUtils.getMessage (Ljava/lang/Throwable;)Ljava/lang/String; // 21d: aastore // 21e: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;)V // 221: goto 230 // 224: astore 10 // 226: aload 0 // 227: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_SAML_SECRET_KEY_UNAVAILABLE Lcom/l7tech/gateway/common/audit/Messages$M; // 22a: aconst_null // 22b: aload 10 // 22d: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 230: aload 9 // 232: ifnull 28b // 235: aload 9 // 237: invokeinterface com/l7tech/security/token/EncryptedKey.getSecretKey ()[B 1 // 23c: astore 10 // 23e: aload 5 // 240: aload 10 // 242: invokevirtual com/l7tech/security/xml/decorator/DecorationRequirements.setEncryptedKey ([B)V // 245: bipush 2 // 246: aload 8 // 248: invokevirtual com/l7tech/xml/saml/SamlAssertion.getVersionId ()I // 24b: if_icmpne 258 // 24e: getstatic com/l7tech/util/SoapConstants.VALUETYPE_SAML_ASSERTIONID_SAML20 Ljava/lang/String; // 251: goto 25b // 254: invokestatic com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.a (Ljava/lang/Exception;)Ljava/lang/Exception; // 257: athrow // 258: getstatic com/l7tech/util/SoapConstants.VALUETYPE_SAML_ASSERTIONID_SAML11 Ljava/lang/String; // 25b: astore 11 // 25d: aload 5 // 25f: aload 8 // 261: invokevirtual com/l7tech/xml/saml/SamlAssertion.getAssertionId ()Ljava/lang/String; // 264: bipush 0 // 265: aload 11 // 267: invokestatic com/l7tech/security/xml/KeyInfoDetails.makeKeyId (Ljava/lang/String;ZLjava/lang/String;)Lcom/l7tech/security/xml/KeyInfoDetails; // 26a: invokevirtual com/l7tech/security/xml/decorator/DecorationRequirements.setEncryptedKeyReferenceInfo (Lcom/l7tech/security/xml/KeyInfoDetails;)V // 26d: goto 28b // 270: astore 10 // 272: aload 0 // 273: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_SAML_SECRET_KEY_UNAVAILABLE Lcom/l7tech/gateway/common/audit/Messages$M; // 276: aconst_null // 277: aload 10 // 279: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 27c: goto 28b // 27f: astore 10 // 281: aload 0 // 282: getstatic com/l7tech/gateway/common/audit/AssertionMessages.ADD_WSS_TOKEN_SAML_SECRET_KEY_UNAVAILABLE Lcom/l7tech/gateway/common/audit/Messages$M; // 285: aconst_null // 286: aload 10 // 288: invokevirtual com/l7tech/server/policy/assertion/xmlsec/ServerAddWssSecurityToken.logAndAudit (Lcom/l7tech/gateway/common/audit/AuditDetailMessage;[Ljava/lang/String;Ljava/lang/Throwable;)V // 28b: getstatic com/l7tech/policy/assertion/AssertionStatus.NONE Lcom/l7tech/policy/assertion/AssertionStatus; // 28e: areturn // try (7 -> 27): 27 org/xml/sax/SAXException // try (5 -> 11): 12 org/xml/sax/SAXException // try (29 -> 60): 137 org/xml/sax/SAXException // try (61 -> 135): 137 org/xml/sax/SAXException // try (152 -> 157): 158 org/xml/sax/SAXException // try (180 -> 186): 187 java/security/UnrecoverableKeyException // try (207 -> 213): 214 org/xml/sax/SAXException // try (221 -> 226): 227 com/l7tech/util/InvalidDocumentFormatException // try (221 -> 226): 234 com/l7tech/security/xml/UnexpectedKeyInfoException // try (221 -> 226): 246 java/security/GeneralSecurityException // try (257 -> 266): 266 org/xml/sax/SAXException // try (254 -> 277): 278 com/l7tech/util/InvalidDocumentFormatException // try (254 -> 277): 285 java/security/GeneralSecurityException } private AssertionStatus c(PolicyEnforcementContext var1, Message var2, String var3, AuthenticationContext var4, DecorationRequirements var5) { String var6 = this.assertion.getWsscSessionVariable(); if (var6 != null && var6.length() >= 1) { Map var7 = var1.getVariableMap(this.d, this.getAudit()); Object var8 = ExpandVariables.processSingleVariableAsObject(Syntax.getVariableExpression(var6), var7, this.getAudit()); if (var8 == null) { this.logAndAudit(AssertionMessages.NO_SUCH_VARIABLE_WARNING, var6); return AssertionStatus.SERVER_ERROR; } else if (!(var8 instanceof SecureConversationSession var9)) { this.logAndAudit(AssertionMessages.ADD_WSS_TOKEN_NOT_SESSION); return AssertionStatus.SERVER_ERROR; } else { var5.setSecureConversationSession(var9); var5.setOmitSecurityContextToken(this.assertion.isOmitSecurityContextToken()); var5.setPreferredSigningTokenType(PreferredSigningTokenType.SCT); return AssertionStatus.NONE; } } else { this.logAndAudit(AssertionMessages.ASSERTION_MISCONFIGURED, h[1]); return AssertionStatus.SERVER_ERROR; } } private AssertionStatus d(PolicyEnforcementContext var1, Message var2, String var3, AuthenticationContext var4, DecorationRequirements var5) throws IOException, PolicyAssertionException { try { if (this.assertion.isUseLastGatheredCredentials()) { return this.a(var1, var2, var3, var4); } } catch (IOException var9) { throw a(var9); } boolean var6 = this.assertion.isProtectTokens(); try { var5.setSignUsernameToken(var6); if (var6) { this.e.applySignatureDecorationRequirements(var1, var2, var3, var4, new o(this)); } } catch (IOException var7) { throw a(var7); } AddWssEncryptionSupport var10000; PolicyEnforcementContext var10001; Message var10002; String var10003; XmlSecurityRecipientContext var10004; String var10005; try { var10000 = this.f; var10001 = var1; var10002 = var2; var10003 = var3; var10004 = this.assertion.getRecipientContext(); var10005 = this.assertion.getUsername(); if (this.assertion.isIncludePassword()) { return ServerAddWssUsernameToken.a( var10000, var1, var2, var3, var10004, var10005, this.assertion.getPassword(), this.d, this.assertion.isIncludeCreated(), this.assertion.isEncrypt(), this.assertion.isIncludeNonce(), this.assertion.isDigest(), this ); } } catch (IOException var8) { throw a(var8); } return ServerAddWssUsernameToken.a( var10000, var10001, var10002, var10003, var10004, var10005, null, this.d, this.assertion.isIncludeCreated(), this.assertion.isEncrypt(), this.assertion.isIncludeNonce(), this.assertion.isDigest(), this ); } private AssertionStatus a(PolicyEnforcementContext var1, Message var2, String var3, AuthenticationContext var4) throws PolicyAssertionException, IOException { p var5 = new p(this); return this.e.applySignatureDecorationRequirements(var1, var2, var3, var4, var5); } private static Exception a(Exception var0) { return var0; } static { String[] var5 = new String[6]; int var3 = 0; String var2 = "w/\u00187@Ur9!K\u0017djJp/VDwyLp!Z\bd8Ix3\u0018\u0014swHp$]\u00009w/\u0018\u0017d{Kk%\u0018\u0007nvH|2K\u0005uqQw`K\u0001rkWv.\u0018\u0012`jWx\"T\u0001!v_t%\u0018\u0013`k\u001ei2W\u0012h|[}\u001fJ\u0001u(!n_k)Y\u0006m}\u001ew/LDgwKw$\u0018\u000bs8Pl,T#J\u0001u(!n_k)Y\u0006m}\u001ep3\u0018\u0011okKi0W\u0016u}Z94A\u0014d\"\u001e"; int var4 = "w/\u00187@Ur9!K\u0017djJp/VDwyLp!Z\bd8Ix3\u0018\u0014swHp$]\u00009w/\u0018\u0017d{Kk%\u0018\u0007nvH|2K\u0005uqQw`K\u0001rkWv.\u0018\u0012`jWx\"T\u0001!v_t%\u0018\u0013`k\u001ei2W\u0012h|[}\u001fJ\u0001u(!n_k)Y\u0006m}\u001ew/LDgwKw$\u0018\u000bs8Pl,T#J\u0001u(!n_k)Y\u0006m}\u001ep3\u0018\u0011okKi0W\u0016u}Z94A\u0014d\"\u001e" .length(); char var1 = '\''; int var7 = -1; label24: while (true) { byte var10000 = 54; String var10001 = var2.substring(++var7, var7 + var1); byte var10002 = -1; while (true) { String var8 = c(var10000, a(var10001)); switch (var10002) { case 0: var5[var3++] = var8; if ((var7 += var1) >= var4) { h = var5; return; } var1 = var2.charAt(var7); break; default: var5[var3++] = var8; if ((var7 += var1) < var4) { var1 = var2.charAt(var7); continue label24; } var2 = "[\u0014j B@{Q%f>UG]M\u0002f9FL})}\u001fh7\\L/\\\u001e)4SJj[\u0002)6_GiA\u0016|'UM/X\u0003`#Q]j\b\u001al,\n\t"; var4 = "[\u0014j B@{Q%f>UG]M\u0002f9FL})}\u001fh7\\L/\\\u001e)4SJj[\u0002)6_GiA\u0016|'UM/X\u0003`#Q]j\b\u001al,\n\t".length(); var1 = 21; var7 = -1; } var10000 = 7; var10001 = var2.substring(++var7, var7 + var1); var10002 = 0; } } } private static char[] a(String var0) { char[] var10000 = var0.toCharArray(); if (var10000.length < 2) { var10000[0] = (char)(var10000[0] ^ 8); } return var10000; } private static String c(int var0, char[] var1) { int var10003 = var1.length; int var10002 = var0; char[] var10001 = var1; int var10000 = var10003; for (int var2 = 0; var10000 > var2; var2++) { var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) { case 0 -> 47; case 1 -> 118; case 2 -> 14; case 3 -> 82; case 4 -> 55; case 5 -> 46; default -> 8; }); } return new String(var10001).intern(); } }