package com.l7tech.server.policy.assertion.xmlsec;

import com.l7tech.common.io.XmlUtil;
import com.l7tech.common.mime.ContentTypeHeader;
import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.gateway.common.audit.Messages.M;
import com.l7tech.message.Message;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.MessageTargetableSupport;
import com.l7tech.policy.assertion.PolicyAssertionException;
import com.l7tech.policy.assertion.xmlsec.BuildRstSoapRequest;
import com.l7tech.policy.variable.NoSuchVariableException;
import com.l7tech.policy.variable.Syntax;
import com.l7tech.security.token.SecurityTokenType;
import com.l7tech.security.wstrust.TokenServiceClient;
import com.l7tech.security.wstrust.WsTrustConfig;
import com.l7tech.security.wstrust.WsTrustConfigException;
import com.l7tech.security.wstrust.WsTrustConfigFactory;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.server.policy.assertion.AbstractServerAssertion;
import com.l7tech.server.policy.assertion.AssertionStatusException;
import com.l7tech.server.policy.variable.ExpandVariables;
import com.l7tech.server.secureconversation.SecureConversationSession;
import com.l7tech.util.Config;
import com.l7tech.util.DomUtils;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.HexUtils;
import com.l7tech.util.SoapConstants;
import com.l7tech.util.TimeUnit;
import com.l7tech.util.ValidatedConfig;
import com.l7tech.xml.WsTrustRequestType;
import com.l7tech.xml.soap.SoapVersion;
import java.io.IOException;
import java.util.Map;
import java.util.logging.Logger;
import org.springframework.beans.factory.BeanFactory;
import org.w3c.dom.Document;
import org.w3c.dom.Element;
import org.xml.sax.SAXException;

public class ServerBuildRstSoapRequest extends AbstractServerAssertion<BuildRstSoapRequest> {
   private static final String d;
   private static final long e = 60000L;
   private static final long f = 86400000L;
   private final Config g;
   private final String[] h;
   private static final String[] i;

   public ServerBuildRstSoapRequest(BuildRstSoapRequest var1, BeanFactory var2) {
      super(var1);
      this.g = a((Config)var2.getBean(i[6], Config.class), this.logger);
      this.h = var1.getVariablesUsed();
   }

   @Override
   public AssertionStatus checkRequest(PolicyEnforcementContext var1) throws IOException, PolicyAssertionException {
      SecurityTokenType var2 = this.assertion.getTokenType();
      SoapVersion var3 = this.assertion.getSoapVersion();
      String var4 = this.assertion.getWsTrustNamespace();
      WsTrustRequestType var5 = this.assertion.getRequestType();
      WsTrustConfig var6 = this.a(var4);
      TokenServiceClient var7 = new TokenServiceClient(var6, null, var3);

      int var10000;
      label126: {
         try {
            if (this.assertion.getKeySize() != null) {
               var10000 = this.assertion.getKeySize() / 8;
               break label126;
            }
         } catch (SAXException var25) {
            throw a(var25);
         }

         var10000 = 32;
      }

      int var8 = var10000;

      label118: {
         try {
            if (this.assertion.isIncludeClientEntropy()) {
               var27 = HexUtils.randomBytes(var8);
               break label118;
            }
         } catch (SAXException var24) {
            throw a(var24);
         }

         var27 = null;
      }

      byte[] var9 = var27;

      label130: {
         try {
            if (this.assertion.getLifetime() == null) {
               var28 = 0L;
               break label130;
            }
         } catch (SAXException var23) {
            throw a(var23);
         }

         try {
            if (this.assertion.getLifetime() == -1L) {
               var28 = this.g.getTimeUnitProperty(i[1], TimeUnit.HOURS.toMillis(2L));
               break label130;
            }
         } catch (SAXException var22) {
            throw a(var22);
         }

         var28 = this.assertion.getLifetime();
      }

      long var10 = var28;
      Map var12 = var1.getVariableMap(this.h, this.getAudit());
      if (this.assertion.getTargetTokenVariable() != null) {
         Object var14 = ExpandVariables.processSingleVariableAsObject(
            Syntax.getVariableExpression(this.assertion.getTargetTokenVariable()), var12, this.getAudit()
         );
         if (!(var14 instanceof Element var13)) {
            if (var14 instanceof Document) {
               var13 = ((Document)var14).getDocumentElement();
            } else if (var14 instanceof SecureConversationSession) {
               var13 = this.a((SecureConversationSession)var14);
            } else if (var14 instanceof String) {
               try {
                  var13 = XmlUtil.parse((String)var14).getDocumentElement();
               } catch (SAXException var17) {
                  M var10001 = AssertionMessages.RST_BUILDER_ERROR;
                  String[] var10002 = new String[1];
                  String var10005 = ExceptionUtils.getMessage(var17);
                  String[] var16 = i;
                  var10002[0] = var16[3] + var10005;
                  this.logAndAudit(var10001, var10002);
                  return AssertionStatus.FAILED;
               }
            } else {
               if (var14 != null) {
                  this.logAndAudit(AssertionMessages.RST_BUILDER_ERROR, i[2] + var14.getClass());
                  return AssertionStatus.FAILED;
               }

               var13 = null;
            }
         }
      } else {
         var13 = null;
      }

      SecurityTokenType var31;
      WsTrustRequestType var33;
      String var35;
      Element var10003;
      String var10004;
      byte[] var10006;
      int var10007;
      label96: {
         try {
            var29 = var7;
            var31 = var2;
            var33 = var5;
            var10003 = var13;
            var10004 = this.a(this.assertion.getAppliesToAddress(), var12);
            var35 = this.a(this.assertion.getIssuerAddress(), var12);
            var10006 = var9;
            if (this.assertion.getKeySize() == null) {
               var10007 = 0;
               break label96;
            }
         } catch (SAXException var21) {
            throw a(var21);
         }

         var10007 = this.assertion.getKeySize();
      }

      Document var26 = var29.createRequestSecurityTokenMessage(var31, var33, var10003, var10004, var35, var10006, var10007, var10);

      try {
         Message var15 = var1.getOrCreateTargetMessage(new MessageTargetableSupport(this.b(BuildRstSoapRequest.VARIABLE_RST_REQUEST)), false);

         label85: {
            try {
               var30 = var15;
               var32 = var26;
               if (var3 == SoapVersion.SOAP_1_1) {
                  var34 = ContentTypeHeader.XML_DEFAULT;
                  break label85;
               }
            } catch (SAXException var19) {
               throw a(var19);
            }

            var34 = ContentTypeHeader.SOAP_1_2_DEFAULT;
         }

         var30.initialize(var32, var34);
         var15.getSecurityKnob().getOrMakeDecorationRequirements().getNamespaceFactory().setWsscNs(var6.getWsscNs());
      } catch (NoSuchVariableException var20) {
         this.logAndAudit(AssertionMessages.RST_BUILDER_OUTPUT, var20.getVariable());
         return AssertionStatus.FAILED;
      }

      try {
         if (var9 != null) {
            var1.setVariable(this.b(BuildRstSoapRequest.VARIABLE_CLIENT_ENTROPY), HexUtils.encodeBase64(var9));
         }
      } catch (SAXException var18) {
         throw a(var18);
      }

      return AssertionStatus.NONE;
   }

   private WsTrustConfig a(String var1) {
      try {
         return WsTrustConfigFactory.getWsTrustConfigForNamespaceUri(var1);
      } catch (WsTrustConfigException var3) {
         this.logAndAudit(AssertionMessages.RST_BUILDER_ERROR, ExceptionUtils.getMessage(var3));
         throw new AssertionStatusException(AssertionStatus.FAILED);
      }
   }

   private Element a(SecureConversationSession var1) {
      Document var2 = XmlUtil.createEmptyDocument(
         SoapConstants.SECURITYTOKENREFERENCE_EL_NAME, SoapConstants.SECURITY_NAMESPACE_PREFIX, SoapConstants.SECURITY_NAMESPACE
      );
      Element var3 = var2.getDocumentElement();
      Element var4 = DomUtils.createAndAppendElementNS(
         var3, SoapConstants.REFERENCE_EL_NAME, SoapConstants.SECURITY_NAMESPACE, SoapConstants.SECURITY_NAMESPACE_PREFIX
      );
      String[] var6 = i;
      var4.setAttributeNS(null, var6[4], var1.getIdentifier());
      String var5;
      if (SoapConstants.WSSC_NAMESPACE.equals(var1.getSCNamespace())) {
         var5 = SoapConstants.WSC_RST_SCT_TOKEN_TYPE;
      } else {
         String var10000 = var1.getSCNamespace();
         var6 = i;
         var5 = var10000 + var6[0];
      }

      var4.setAttributeNS(null, i[5], var5);
      return var3;
   }

   private String a(String var1, Map<String, Object> var2) {
      String var3 = null;
      if (var1 != null) {
         var3 = ExpandVariables.process(var1, var2, this.getAudit());
      }

      return var3;
   }

   private String b(String var1) {
      String var2 = var1;
      if (this.assertion.getVariablePrefix() != null) {
         var2 = this.assertion.getVariablePrefix() + "." + var1;
      }

      return var2;
   }

   private static Config a(Config var0, Logger var1) {
      ValidatedConfig var2 = new ValidatedConfig(var0, var1);
      String[] var3 = i;
      var2.setMinimumValue(var3[7], 60000L);
      var2.setMaximumValue(var3[7], 86400000L);
      return var2;
   }

   private static SAXException a(SAXException var0) {
      return var0;
   }

   static {
      String[] var5 = new String[8];
      int var3 = 0;
      String var2 = "\u001d:k\u00142]<|\u0002v\u001a\u001bVg{\u0005z\u001a\u0007W\ng\u000eo\n\u0007A(|\tv\u0001[V,n\u0001l\u0003\u0001a,{\u0013p\u0000\u001bv<z\u0001m\u0006\u001a\\!g'{\u0015i\u001f\u001a@=m\u00049\u001b\u001aY,f@o\u000e\u0007[(j\f|O\u0001K9mZ9\u0015{'~\u0001u\u0006\u0011\u0012=g\u000b|\u0001UD(d\u0015|UU\u0003g\u001bA\td(d\u0015|;\fB,";
      int var4 = "\u001d:k\u00142]<|\u0002v\u001a\u001bVg{\u0005z\u001a\u0007W\ng\u000eo\n\u0007A(|\tv\u0001[V,n\u0001l\u0003\u0001a,{\u0013p\u0000\u001bv<z\u0001m\u0006\u001a\\!g'{\u0015i\u001f\u001a@=m\u00049\u001b\u001aY,f@o\u000e\u0007[(j\f|O\u0001K9mZ9\u0015{'~\u0001u\u0006\u0011\u0012=g\u000b|\u0001UD(d\u0015|UU\u0003g\u001bA\td(d\u0015|;\fB,"
         .length();
      char var1 = 4;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 7;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = b(var10000, c(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     i = var5;
                     d = i[7];
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "\u0010}+G-Lg\fv?X/2\fm-S'KJ\u00076*T+KV\u0006[6_>[V\u0010y-X'P\n\u0007}?P=RP0}*B!QJ'm+P<WK\r";
                  var4 = "\u0010}+G-Lg\fv?X/2\fm-S'KJ\u00076*T+KV\u0006[6_>[V\u0010y-X'P\n\u0007}?P=RP0}*B!QJ'm+P<WK\r".length();
                  var1 = '\f';
                  var7 = -1;
            }

            var10000 = 86;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static char[] c(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 114);
      }

      return var10000;
   }

   private static String b(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 53;
            case 1 -> 78;
            case 2 -> 15;
            case 3 -> 103;
            case 4 -> 30;
            case 5 -> 104;
            default -> 114;
         });
      }

      return new String(var10001).intern();
   }
}