package com.l7tech.server.policy.assertion.xmlsec;

import com.l7tech.common.io.CertUtils;
import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.objectmodel.FindException;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.xmlsec.LookupTrustedCertificateAssertion;
import com.l7tech.policy.assertion.xmlsec.LookupTrustedCertificateAssertion.LookupType;
import com.l7tech.security.cert.TrustedCert;
import com.l7tech.security.xml.SecurityTokenResolver;
import com.l7tech.server.identity.cert.TrustedCertCache;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.server.policy.assertion.AbstractServerAssertion;
import com.l7tech.server.policy.variable.ExpandVariables;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.Functions;
import com.l7tech.util.Option;
import com.l7tech.util.Functions.Unary;
import jakarta.inject.Inject;
import jakarta.inject.Named;
import java.math.BigInteger;
import java.security.cert.X509Certificate;
import java.util.Collection;
import java.util.List;
import java.util.Map;
import javax.security.auth.x500.X500Principal;

public class ServerLookupTrustedCertificateAssertion extends AbstractServerAssertion<LookupTrustedCertificateAssertion> {
   @Inject
   private TrustedCertCache trustedCertCache;
   @Inject
   @Named("securityTokenResolver")
   private SecurityTokenResolver securityTokenResolver;
   private final String[] d;
   private static final Unary<X509Certificate, TrustedCert> e;
   private static final String[] f;

   public ServerLookupTrustedCertificateAssertion(LookupTrustedCertificateAssertion var1) {
      super(var1);
      this.d = var1.getVariablesUsed();
   }

   @Override
   public AssertionStatus checkRequest(PolicyEnforcementContext var1) {
      AssertionStatus var2 = AssertionStatus.FALSIFIED;
      LookupType var3 = (LookupType)Option.optional(this.assertion.getLookupType()).orSome(LookupType.TRUSTED_CERT_NAME);
      String var4 = null;
      Map var5 = var1.getVariableMap(this.d, this.getAudit());

      try {
         List var6 = switch (u.a[this.assertion.getLookupType().ordinal()]) {
            case 1 -> {
               X500Principal var7 = this.a(ExpandVariables.process(this.assertion.getCertIssuerDn(), var5, this.getAudit()));
               BigInteger var8 = this.b(ExpandVariables.process(this.assertion.getCertSerialNumber(), var5, this.getAudit()));
               var4 = var7 + "/" + var8;
               this.logAndAudit(AssertionMessages.CERT_ANY_LOOKUP_NAME, var3.toString(), var4);
               yield Option.optional(this.securityTokenResolver.lookupByIssuerAndSerial(var7, var8)).toList();
            }
            case 2 -> {
               var4 = ExpandVariables.process(this.assertion.getCertSubjectKeyIdentifier(), var5, this.getAudit());
               this.logAndAudit(AssertionMessages.CERT_ANY_LOOKUP_NAME, var3.toString(), var4);
               yield Option.optional(this.securityTokenResolver.lookupBySki(var4)).toList();
            }
            case 3 -> {
               var4 = CertUtils.getDN(this.a(ExpandVariables.process(this.assertion.getCertSubjectDn(), var5, this.getAudit())));
               this.logAndAudit(AssertionMessages.CERT_ANY_LOOKUP_NAME, var3.toString(), var4);
               yield Option.optional(this.securityTokenResolver.lookupByKeyName(var4)).toList();
            }
            case 4 -> {
               var4 = ExpandVariables.process(this.assertion.getCertThumbprintSha1(), var5, this.getAudit());
               this.logAndAudit(AssertionMessages.CERT_ANY_LOOKUP_NAME, var3.toString(), var4);
               yield Option.optional(this.securityTokenResolver.lookup(var4)).toList();
            }
            default -> {
               var4 = ExpandVariables.process(this.assertion.getTrustedCertificateName(), var5, this.getAudit());
               this.logAndAudit(AssertionMessages.CERT_ANY_LOOKUP_NAME, var3.toString(), var4);
               yield Functions.map(this.trustedCertCache.findByName(var4), e);
            }
         };

         label58: {
            try {
               switch (var6.size()) {
                  case 0:
                     this.logAndAudit(AssertionMessages.CERT_ANY_LOOKUP_NOTFOUND, var3.toString(), var4);
                     return var2;
                  case 1:
                     break label58;
               }
            } catch (FindException var10) {
               throw a(var10);
            }

            try {
               if (!this.assertion.isAllowMultipleCertificates()) {
                  this.logAndAudit(AssertionMessages.CERT_ANY_LOOKUP_MULTIPLE, var3.toString(), var4);
                  return var2;
               }
            } catch (FindException var9) {
               throw a(var9);
            }

            this.a(var1, var6, true);
            var2 = AssertionStatus.NONE;
            return var2;
         }

         this.a(var1, var6, false);
         var2 = AssertionStatus.NONE;
      } catch (FindException var11) {
         this.logAndAudit(
            AssertionMessages.CERT_ANY_LOOKUP_ERROR,
            new String[]{var3.toString(), var4, ExceptionUtils.getMessage(var11)},
            ExceptionUtils.getDebugException(var11)
         );
         var2 = AssertionStatus.FAILED;
      }

      return var2;
   }

   private X500Principal a(String var1) throws FindException {
      try {
         return new X500Principal(var1);
      } catch (IllegalArgumentException var3) {
         throw new FindException(f[1] + ExceptionUtils.getMessage(var3), var3);
      }
   }

   private BigInteger b(String var1) throws FindException {
      try {
         return new BigInteger(var1);
      } catch (NumberFormatException var3) {
         throw new FindException(f[0] + ExceptionUtils.getMessage(var3), var3);
      }
   }

   private void a(PolicyEnforcementContext var1, Collection<X509Certificate> var2, boolean var3) {
      String var4 = this.assertion.getVariableName();
      Object var5;
      if (var3) {
         var5 = var2.toArray(new X509Certificate[var2.size()]);
      } else {
         var5 = Option.first(var2).toNull();
      }

      var1.setVariable(var4, var5);
   }

   static {
      String[] var5 = new String[2];
      int var3 = 0;
      String var2 = "\u001femFVZevh~UNZg?hzS_\u0013r3yrFV\u0013o#fyBH\t!\f\u001femFVZevOU\u001d\u001a";
      int var4 = "\u001femFVZevh~UNZg?hzS_\u0013r3yrFV\u0013o#fyBH\t!\f\u001femFVZevOU\u001d\u001a".length();
      char var1 = '#';
      int var0 = -1;

      while (true) {
         String var10002 = b(87, c(var2.substring(++var0, var0 + var1)));
         byte var10001 = -1;
         var5[var3++] = var10002;
         if ((var0 += var1) >= var4) {
            f = var5;
            e = new t();
            return;
         }

         var1 = var2.charAt(var0);
      }
   }

   private static FindException a(FindException var0) {
      return var0;
   }

   private static char[] c(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 86);
      }

      return var10000;
   }

   private static String b(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 1;
            case 1 -> 92;
            case 2 -> 76;
            case 3 -> 112;
            case 4 -> 109;
            case 5 -> 100;
            default -> 86;
         });
      }

      return new String(var10001).intern();
   }
}